Management Guide - Kamery IP

4Command Line InterfaceMAC address verification is enabled, then the packet will only beforwarded if the client’s hardware address stored in the DHCP packet isthe same as the source MAC address in the Ethernet header.* If the DHCP packet is not a recognizable type, it is dropped.- If a DHCP packet from a client passes the filtering criteria above, it will onlybe forwarded to trusted ports in the same VLAN.- If a DHCP packet is from server is received on a trusted port, it will beforwarded to both trusted and untrusted ports in the same VLAN.• If the DHCP snooping is globally disabled, all dynamic bindings are removedfrom the binding table.• Additional considerations when the switch itself is a DHCP client – The port(s)through which the switch submits a client request to the DHCP server must beconfigured as trusted (ip dhcp snooping trust, page 4-181). Note that theswitch will not add a dynamic entry for itself to the binding table when itreceives an ACK message from a DHCP server. Also, when the switch sendsout DHCP client packets for itself, no filtering takes place. However, when theswitch receives any messages from a DHCP server, any packets receivedfrom untrusted ports are dropped.ExampleThis example enables DHCP snooping globally for the switch.Console(config)#ip dhcp snoopingConsole(config)#Related Commandsip dhcp snooping vlan (4-180)ip dhcp snooping trust (4-181)ip dhcp snooping vlanThis command enables DHCP snooping on the specified VLAN. Use the no form torestore the default setting.Syntax[no] ip dhcp snooping vlan vlan-idvlan-id - ID of a configured VLAN (Range: 1-4094)Default SettingDisabledCommand ModeGlobal ConfigurationCommand Usage• When DHCP snooping enabled globally using the ip dhcp snoopingcommand (page 4-179), and enabled on a VLAN with this command, DHCP4-180