3-5z Filtering the source IP address in a packet. If the source IP address and the number of the port thatreceives the packet are consistent with entries in the DHCP-snooping table or static binding table,the switch regards the packet as a valid packet and forwards it; otherwise, the switch drops itdirectly.z Filtering the source IP address and the source MAC address in a packet. If the source IP addressand source MAC address in the packet, and the number of the port that receives the packet areconsistent with entries in the DHCP-snooping table or static binding table, the switch regards thepacket as a valid packet and forwards it; otherwise, the switch drops it directly.DHCP Snooping ConfigurationConfiguring DHCP SnoopingFollow these steps to configure DHCP snooping:Operation Command DescriptionEnter system view system-view —Enable DHCP snooping dhcp-snoopingRequiredBy default, the DHCP snooping functionis disabled.After DHCP snooping is enabled on a Switch 4210, clients connected with this switch cannot obtain IPaddresses dynamically through BOOTP.Configuring DHCP Snooping Trusted/Untrusted PortsFollow these steps to configure DHCP Snooping Trusted/Untrusted Ports:Operation Command DescriptionEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Specify the current portas a trusted port dhcp-snooping trustRequiredBy default, after DHCP snooping isenabled, all ports of the switch areuntrusted ports.
