CLI Guide

Layer 2 Switching Commands 358
The administrator can configure the rate and burst interval. Rate limiting is
configured independently on each Ethernet or port-channel interface and
may be enabled on both DHCP trusted and untrusted interfaces. The rate
limit is configurable in the range of 0-300 packets per second and the burst
interval in the range of 1-15 seconds. In general, a rate limit of under 100 pps
is valid for untrusted interfaces.
Examples
console(config-if-Gi1/0/1)#ip dhcp snooping limit rate 100 burst interval 1
ip dhcp snooping log-invalid
Use the ip dhcp snooping log-invalid command to enable logging of DHCP
messages filtered by the DHCP Snooping application. Use the no form of this
command to disable logging.
Syntax
ip dhcp snooping log-invalid
no ip dhcp snooping log-invalid
Default Configuration
Logging of filtered messages is disabled by default.
Invalid DHCP messages are not logged by default.
Command Mode
Interface Configuration (gigabitethernet, port-channel, tengigabitethernet,
fortygigabitethernet) mode
User Guidelines
This command is available in Ethernet interface configuration mode or port
channel configuration mode.
Example
console(config-if-Gi1/0/1)#ip dhcp snooping log-invalid
console(config-if-Gi1/0/1)#no ip dhcp snooping log-invalid