Administrator Guide

Layer 2 Switching Commands 367
no ipv6 dhcp snooping verify mac-address
Default Configuration
By default, MAC address verification is not enabled.
Command Modes
Global Configuration mode
User Guidelines
DHCP MAC address verification operates on DHCP messages received over
untrusted interfaces. The source MAC address of DHCP packet is different
from the client hardware if:
• A DHCP discovery/request broadcast packet that was forwarded by the
relay agent.
• A DHCP unicast request packet was routed in renew process.
For DHCP servers and relay agents connected to untrusted interfaces, source
MAC verification should be disabled.
DHCP snooping must be enabled on at least one VLAN and globally enabled
to become operational.
Example
console(config)#ipv6 dhcp snooping
console(config)#ipv6 dhcp snooping vlan 5-10,15,30
console(config)#interface te1/0/1
console(config-if-Te1/0/1)#switchport mode access
console(config-if-Te1/0/1)#switchport access vlan 10
console(config-if-Te1/0/1)#no ipv6 dhcp snooping trust
console(config-if-Te1/0/1)#exit
console(config)#ipv6 dhcp snooping verify mac-address
ipv6 verify binding
Use the ipv6 verify binding command to configure a static IP source guard
binding.