Specifications

set dhcpsnooping log-invalid

SecureStack B2 Configuration Guide 18-9

set dhcpsnooping log-invalid

UsethiscommandtoenableordisableloggingofinvalidDHCPmessagesonports.

Syntax

set dhcpsnooping log-invalid port port-string {enable | disable}

Parameters

Defaults

Disabled.

Mode

Switchcommand,read‐write.

Usage

TheDHCPsnoopingapplicationprocessesincomingDHCPmessages.ForDHCPRELEASEand

DHCPDECLINEmessages,theapplicationcomparesthereceiveinterface andVLANwiththe

clientʹsinterfaceandVLANinthebindingsdatabase.Iftheinterfacesdonotmatch,the

applicationlogstheeventiflogginghasbeenenabled.

Usetheshow

dhcpsnoopingcommandtodisplaythestatus(enabledordisabled)oflogging

invalidpacketsforeachinterfaceinanenabledVLAN.Theshowdhcpsnoopingstatistics

commandshowstheactualnumberofservermessagesreceivedonuntrustedports.

Example

ThisexampleenablesloggingofinvalidDHCPmessagesonportge.1.1andthendisplaysthe

DHCPconfigurationsettings.

(rw)->set dhcpsnooping log invalid port ge.1.1 enable

B2(su)->show dhcpsnooping

DHCP snooping is Disabled

DHCP snooping source MAC verification is enabled

DHCP snooping is enabled on the following VLANs:

Interface Trusted Log Invalid Pkts

----------- ---------- ----------------

ge.1.1 No Yes

ge.1.2 No No

ge.1.3 Yes No

portport‐string Specifiestheportorports onwhichtoenableordisableloggingof

invalidpackets.

enable|disable Enablesordisablesloggingonthespecifiedports.