Layer 2 Switching Commands 361no ipv6 dhcp snooping verify mac-addressDefault ConfigurationBy default, MAC address verification is not enabled.Command ModesGlobal Configuration modeUser GuidelinesDHCP MAC address verification operates on DHCP messages received overuntrusted interfaces. The source MAC address of DHCP packet is differentfrom the client hardware if:• A DHCP discovery/request broadcast packet that was forwarded by therelay agent.• A DHCP unicast request packet was routed in renew process.For DHCP servers and relay agents connected to untrusted interfaces, sourceMAC verification should be disabled.DHCP snooping must be enabled on at least one VLAN and globally enabledto become operational.Exampleconsole(config)#ipv6 dhcp snoopingconsole(config)#ipv6 dhcp snooping vlan 5-10,15,30console(config)#interface te1/0/1console(config-if-Te1/0/1)#switchport mode accessconsole(config-if-Te1/0/1)#switchport access vlan 10console(config-if-Te1/0/1)#no ipv6 dhcp snooping trustconsole(config-if-Te1/0/1)#exitconsole(config)#ipv6 dhcp snooping verify mac-addressipv6 verify bindingUse the ipv6 verify binding command to configure a static IP source guardbinding.
