Ip Dhcp Snooping Verify Mac-Address - Cisco Nexus 7000 Series Command Reference Manual

ip dhcp snooping verify mac-address

ip dhcp snooping verify mac-address
To enable DHCP snooping MAC address verification, use the ip dhcp snooping verify mac-address command.
To disable DHCP snooping MAC address verification, use the no form of this command.
ip dhcp snooping verify mac-address
no ip dhcp snooping verify mac-address
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
Global configuration
Command History
Release
4.0(1)
Usage Guidelines
By default, MAC address verification with DHCP snooping is not enabled.
To use this command, you must enable the DHCP snooping feature (see the feature dhcp command).
If the device receives a packet on an untrusted interface and the source MAC address and the DHCP client
address do not match, address verification causes the device to drop the packet.
This command does not require a license.
Examples This example shows how to enable DHCP snooping MAC address verification:
switch# configure terminal
switch(config)# ip dhcp snooping verify mac-address
switch(config)#
Related Commands
Command
ip dhcp relay
ip dhcp snooping
ip dhcp snooping information option
Cisco Nexus 7000 Series Security Command Reference
414
Modification
This command was introduced.
Description
Enables or disables the DHCP relay agent.
Globally enables DHCP snooping on the device.
Enables the insertion and removal of option-82
information for DHCP packets forwarded without the
use of the DHCP relay agent.
I Commands