Owner`s manual

Dynamic Host Configuration Protocol (DHCP) | 101
To enable IP+MAC source address validation, follow these steps:
FTOS creates an ACL entry for each IP+MAC address pair in the binding table and applies it to the
interface.
To display the IP+MAC ACL, follow this step:
Step Task Command Syntax Command Mode
1 Allocate at least one FP block to the
ipmacacl CAM region.
cam-acl l2acl
CONFIGURATION
2 Save the running-config to the
startup-config.
copy running-config startup-config
EXEC Privilege
3 Reload the system.
reload
EXEC Privilege
4 Enable IP+MAC Source Address
Validation.
ip dhcp source-address-validation ipmac
INTERFACE
Task Command Syntax Command Mode
Display the IP+MAC ACL for an
interface for the entire system.
show ip dhcp snooping source-address-validation
[interface]
EXEC Privilege