Command Line Interface Guide

368 DHCP Snooping Commands
Default Configuration
DHCP Snooping is disabled by default.
Command Mode
Global Configuration mode
User Guidelines
In order to enable DHCP snooping, perform the following three steps:
1
Enable DHCP Snooping globally.
2 Enable DHCP Snooping per VLAN.
3 Set DHCP Snooping trusted port on the port in the DHCP server
direction.
Example
The following configuration enables DHCP snooping on VLAN 1 for a switch
connected to a DHCP server over interface gi1/0/4:
console(config)#ip dhcp snooping
console(config-if-vlan1)#ip dhcp snooping
console(config-if-vlan1)#exit
console(config)#interface gi1/0/4
console(config-if-Gi1/0/4)#ip dhcp snooping trust
ip dhcp snooping binding
Use the ip dhcp snooping binding command to configure a static DHCP
Snooping binding. Use the “no” form of this command to remove a static
binding.
Syntax
ip dhcp snooping binding mac-address vlan vlan-id ip-address interface
{gigabitethernet unit/slot/port | tengigabitethernet unit/slot/port
|
fortygigabitethernet
unit/slot/port}
no ip dhcp snooping binding mac-address
2CSPC4.X8100-SWUM100.book Page 368 Wednesday, August 29, 2012 6:23 PM