nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

Egypt#
Example 5-67 shows how to verify the DHCP Snooping configuration.
Example 5-67. Verifying the DHCP Snooping Configuration
Click here to view code image
Egypt# show ip dhcp snooping
DHCP snooping service is enabled
Switch DHCP snooping is enabled
DHCP snooping is configured on the following VLANs:
5,10,100,500
DHCP snooping is operational on the following VLANs:
5,10,100,500
Insertion of Option 82 is disabled
Verification of MAC address is enabled
DHCP snooping trust is configured on the following
interfaces:
Interface
Trusted
------------ -------
Ethernet1/1
Yes
Egypt#
Egypt# show ip dhcp snooping binding
MacAddress IpAddress LeaseSec Type VLA
0050.561f.73d3 10.10.10.211 1600 dynamic 100
----------------- --------------- -------- ---------
- ---- -------------
Egypt#
The DHCP binding table shows the client MAC address; client IP address assigned from the
DHCP server; IP address lease time; binding type, statically configured from the CLI or
dynamically learned; VLAN number of the client interface; and the interface that connects to
the DHCP client host.
Configuring Dynamic ARP Inspection
Address Resolution Protocol (ARP) provides IP communication within a Layer 2 broadcast
domain by mapping an IP address to a MAC address. There are known security issues with
ARP, such as ARP spoofing attacks. ARP spoofing attacks affect hosts, switches, and
routers connected to your Layer 2 network by sending false information to the ARP caches
of the devices connected to the subnet.
Dynamic ARP Inspection (DAI) ensures that only valid ARP requests and responses are