Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

ip dhcp snooping verifyChapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsip dhcp snooping verifyUse the ip dhcp snooping verify global configuration command on the switch stack or on a standaloneswitch to configure the switch to verify on an untrusted port that the source MAC address in a DHCPpacket matches the client hardware address. Use the no form of this command to configure the switchto not verify the MAC addresses.ip dhcp snooping verify mac-addressno ip dhcp snooping verify mac-addressSyntax DescriptionThis command has no arguments or keywords.DefaultsThe switch verifies the source MAC address in a DHCP packet that is received on untrusted portsmatches the client hardware address in the packet.Command ModesGlobal configurationCommand HistoryRelease12.2(35)SE2ModificationThis command was introduced.Usage GuidelinesIn a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port,it automatically verifies that the source MAC address and the DHCP client hardware address match. Ifthe addresses match, the switch forwards the packet. If the addresses do not match, the switch drops thepacket.ExamplesThis example shows how to disable the MAC address verification:Switch(config)# no ip dhcp snooping verify mac-addressYou can verify your settings by entering the show ip dhcp snooping user EXEC command.Related CommandsCommandshow ip dhcp snoopingDescriptionDisplays the DHCP snooping configuration.2-244Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08