Users Guide

Usage Information
When you enable this feature, the switch begins to monitor all transactions between DHCP servers and DHCP
clients and use the information to build the DHCP snooping binding table.
If you disable DHCP snooping, the system removes the DHCP snooping binding table. Source Address Validation
and Dynamic ARP Inspection entries are also removed.
This command is accessible to users with sysadmin and secadmin roles.
The no version of this command disables DHCP snooping globally.
Example
OS10(config)# ip dhcp snooping
Supported
Releases
10.5.0 or later or later
ip dhcp snooping (interface)
Enables DHCP snooping on a VLAN.
Syntax
ip dhcp snooping
Parameters None
Defaults Enabled if enabled globally
Command Mode INTERFACE VLAN
Usage Information
When you enable this feature, the switch begins to monitor all transactions between DHCP servers and DHCP
clients and use the information to build the DHCP snooping binding table.
The system snoops packets from DHCP clients on the DHCP snooping-enabled VLAN and forwards the packets
to all physical and port-channel interfaces of the VLAN.
The system processes DHCP server packets that are received through trusted physical interfaces and port-
channel interfaces and forwards the packets to the all VLAN member interfaces.
You can enable DHCP snooping globally and disable it on an interface.
This command is accessible to users with sysadmin and secadmin roles.
The no version of this command disables DHCP snooping on the interface.
Example
OS10(conf-if-vl-4)# ip dhcp snooping
Supported
Releases
10.5.0 or later or later
ip dhcp snooping binding
Create a static DHCP snooping binding entry in the DHCP binding table.
Syntax
ip dhcp snooping binding mac address vlan vlan-id ip ip-address interface
[ethernet slot/port/sub-port | port-channel port-channel-id | VLTi]
Parameters
• mac address—Enter the MAC address of the host to which the server is leasing the IP address.
• vlan vlan-id—Enter the VLAN ID of the VLAN the host belongs to. The range is from 1 to 4093.
• ip ip-address—Enter the IP address of the host.
• interface interface-type—Enter the interface type information.
Defaults None
Command Mode CONFIGURATION
Usage Information
When you create a static DHCP snooping entry, it does not time out.
Before creating a static entry for a VLAN, create the VLAN. If you do not create a VLAN before creating a static
entry, the system displays an error message.
Before deleting a port-channel or VLAN, remove any associated DHCP snooping entries.
210 System management