Installation guide

General Security Measures
3-121
3
CLI – This example shows how to enable the DHCP Snooping Trust Status for ports.
Displaying DHCP Snooping Binding Information
Binding table entries can be displayed on the Binding Information page.
Command Attributes
• Store DHCP snooping binding entries to flash. – Writes all dynamically learned
snooping entries to flash memory.
This function can be used to store the currently learned dynamic DHCP snooping
entries to flash memory. These entries will be restored to the snooping table when
the switch is reset. However, note that the lease time shown for a dynamic entry
that has been restored from flash memory will no longer be valid.
• Clear DHCP snooping binding entries from flash. – Removes all dynamically
learned snooping entries from flash memory.
• No. – Entry number for DHCP snooping binding information.
• Unit – Stack unit.
• Port – Port number.
• VLAN ID – VLAN for which DHCP snooping has been enabled.
• MAC Address – Physical address associated with the entry.
• IP Address – IP address corresponding to the client.
• IP Address Type – Indicates an IPv4 or IPv6 address type.
• Lease Time (Seconds) – The time for which this IP address has been leased to
the client.
Console(config)#interface ethernet 1/5
Console(config-if)#ip dhcp snooping trust 4-161
Console(config-if)#end
Console#show ip dhcp snooping 4-165
Global DHCP Snooping status: disable
DHCP Snooping Information Option Status: disable
DHCP Snooping Information Policy: replace
DHCP Snooping is configured on the following VLANs:
Verify Source Mac-Address: enable
Interface Trusted
---------- ----------
Eth 1/1 No
Eth 1/2 No
Eth 1/3 No
Eth 1/4 No
Eth 1/5 Yes
.
.
.