D-Link DGS-6600-48T Product Manual - Page 248

DGS-6604 ip dhcp snooping vlan ip dhcp snooping vlan Use this command to enable DHCP snooping on a VLAN or a group of VLANs. Use no command to disable DHCP snooping on a VLAN or a group of VLANs. ip dhcp snooping vlan VLAN-ID [, | -] no ip dhcp snooping vlan VLAN-ID [, | -] Syntax Description vlan VLAN-ID Specify the VLAN to enable or disable the DHCP snooping function. , (Optional) Specify a series of VLAN's, or separate a range of VLAN's from a previous range. Enter a space before and after the comma. - (Optional) Specify a range of VLANs. Enter a pace before and after the hyphen. Default Command Mode Usage Guideline Example None Global configuration mode Use the ip dhcp snooping command to globally enable DHCP snooping and use the ip dhcp snooping vlan command to enable DHCP snooping for a VLAN. DHCP snooping process occurs during the relay agent relaying the packet. The DHCP snooping function snoops the DHCP packets arriving at the untrusted interface on VLAN that is enabled for DHCP snooping. With this function, the DHCP packets that come from an un-trusted interface can be validated, and a DHCP binding database will be constructed for the DHCP snooping enabled VLAN. The binding database provides IP and MAC binding information that can be further used by the IP source guard and dynamic ARP inspection process. The DHCP snooping enabled status for a secondary VLAN follows the status for its primary VLAN. Thus, the DHCP snooping setting does not take effect if it is configured on a secondary VLAN. This example shows how to enable DHCP snooping on vlan10: Switch# configure terminal Switch(config)# ip dhcp snooping vlan 10 Switch(config)# CLI Reference Guide 238