Netgear XCM8806 Chassis Hardware Installation Guide - Page 633

NETGEAR 8800 Chassis Switch CLI Manual snooping is also used by the source IP lockdown feature to create ACLs that permit traffic from DHCP clients. All other traffic is dropped. In addition, the DHCP snooping violation action setting determines what action(s) the switch takes when a rouge DHCP server packet is seen on an untrusted port. To enable DHCP snooping, use the following command: enable ip-security dhcp-snooping {vlan} ports [all | ] violation-action [drop-packet {[block-mac | block-port] [duration | permanently] | none]}] {snmp-trap} Displaying Source IP Lockdown Information To display the source IP lockdown configuration on the switch, use the following command: show ip-security source-ip-lockdown Example The following command enables source IP lockdown on ports 1:1 and 1:4: enable ip-security source-ip-lockdown ports 1:1, 1:4 enable mac-lockdown-timeout ports enable mac-lockdown-timeout ports [all | ] Description Enables the MAC address lock down timeout feature for the specified port or group of ports or for all ports on the switch. Syntax Description all port_list Specifies all ports Specifies one or more ports or slots and ports. Default By default, the MAC address lock down timeout feature is disabled. Usage Guidelines You cannot enable the MAC lock down timer on a port that also has the lock learning feature enabled. Example The following command enables the MAC address lock down timeout feature for ports 2:3, 2:4, and 2:6: enable mac-lockdown-timeout ports 2:3, 2:4, 2:6 Chapter 15. Security Commands | 633