ip dhcp snooping verify mac-address

Use this command to enable MAC address verification. If the device receives a DHCP request packet on an untrusted interface and the source MAC address and the DHCP client hardware address do not match, the device drops the packet.

Use the no form of this command to disable address verification.

This command enables both the DHCPv4 and DHCPv6 functionality.

Command Syntax

Copy

ip dhcp snooping verify mac-address bridge <1-32>
no ip dhcp snooping verify mac-address bridge <1-32>

Parameters

<1-32>

Bridge number

Default

By default MAC address verification is disabled.

Command Mode

Configure mode

Applicability

This command was introduced in OcNOS version 5.0.

Example

Copy
configure terminal
(config)# bridge 1 protocol mstp
(config)#ip dhcp snooping bridge 1
(config)#ip dhcp snooping verify mac-address bridge 1