mac

Commands for DHCP Snooping
362
Default Settings: DHCP Snooping has no static binding list entry by default.
Usage Guide: The static binding users is deal in the same way as the dynamic binding
users captured by DHCP SNOOPING; the follwoing actions are all allowed: notifying
DOT1X to be a controlled user of DOT1X, adding a trusted user list entry directly, adding
a bingding ARP list entry. The static binding uses will never be aged, and have a priority
higher than dynamic binding users. Only after the DHCP SNOOPING binding function is
enabled, the static binding users can be enabled.
Example: Configure static binding users.
switch(config)#ip dhcp snooping binding user 00-03-0f-12-34-56 address 192.168.1.16
interface Ethernet 1/16
Relative Command: ip dhcp snooping binding enable
31.14 ip dhcp snooping binding user-control
Command: ip dhcp snooping binding user-control
no ip dhcp snooping binding user-control
Function: Enable the binding user funtion.
Parameters: None.
Command Mode: Port Mode.
Default Settings: By default, the binding user funciton is disabled on all ports.
Usage Guide: When this function is enabled, DHCP SNOOPING will treat the captured
binding information as trusted users allowed to access all resources. This command is
mutually exclusive to “ip dhcp snooping binding dot1x“ command.
Only after DHCP SNOOPING binding function is enabled, the binding user function
can be set. This command is not limited by “ip dhcp snooping“ based on VLAN, but it is
only limited by the global “ip dhcp snooping enable“ command.
Example: Enable the binding USER funciton on port ethernet1/1.
switch(config)#interface ethernet 1/1
switch(Config-Ethernet 1/1)# ip dhcp snooping binding user-control
Relative Command: ip dhcp snooping binding enable
ip dhcp snooping binding dot1x