Cisco Gigabit Ethernet Switch Module for HP p-Class BladeSystem Software Configuration Guide

16-7
Cisco Gigabit Ethernet Switch Module for HP p-Class BladeSystem Software Configuration Guide
380261-003
Chapter 16 Configuring DHCP Features
Configuring DHCP Features
• If a switch port is connected to a DHCP server, configure a port as trusted by entering the ip dhcp
snooping trust interface configuration command.
• If a switch port is connected to a DHCP client, configure a port as untrusted by entering the no ip
dhcp snooping trust interface configuration command.
• Do not enter the ip dhcp snooping information option allow-untrusted command on an
aggregation switch to which an untrusted device is connected. If you enter this command, an
untrusted device might spoof the option-82 information.
• Starting with Cisco IOS Release 12.2(37)SE, you can display DHCP snooping statistics by entering
the show ip dhcp snooping statistics user EXEC command, and you can clear the snooping
statistics counters by entering the clear ip dhcp snooping statistics privileged EXEC command.
Configuring the DHCP Relay Agent
Beginning in privileged EXEC mode, follow these steps to enable the DHCP relay agent on the switch:
To disable the DHCP server and relay agent, use the no service dhcp global configuration command.
See the “Configuring DHCP” section of the “IP Addressing and Services” section of the Cisco IOS IP
Configuration Guide, Release 12.2 for these procedures:
• Checking (validating) the relay agent information
• Configuring the relay agent forwarding policy
Enabling DHCP Snooping and Option 82
Beginning in privileged EXEC mode, follow these steps to enable DHCP snooping on the switch:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
service dhcp Enable the DHCP server and relay agent on your switch. By default, this
feature is enabled.
Step 3
end Return to privileged EXEC mode.
Step 4
show running-config Verify your entries.
Step 5
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
ip dhcp snooping Enable DHCP snooping globally.
Step 3
ip dhcp snooping vlan vlan-range Enable DHCP snooping on a VLAN or range of VLANs. The range is 1
to 4094.
You can enter a single VLAN ID identified by VLAN ID number, a series
of VLAN IDs separated by commas, a range of VLAN IDs separated by
hyphens, or a range of VLAN IDs separated by entering the starting and
ending VLAN IDs separated by a space.