DHCP Snooping 155ExampleThe following example configures Ethernet port 1/e15 as trusted for DHCP snooping purposes.ip dhcp snooping information option allowed-untrustedThe ip dhcp snooping information option allowed-untrusted Global Configuration mode commandconfigures a switch to accept DHCP packets with option-82 information from an untrusted port. Use theno form of this command to configure the switch to drop these packets from an untrusted port.Syntax• ip dhcp snooping information option allowed-untrusted• no ip dhcp snooping information option allowed-untrustedDefault ConfigurationThe default configuration is to discard DHCP packets with option-82 information from an untrustedport.Command ModeGlobal Configuration mode.User GuidelinesThere are no user guidelines for this command.ExampleThe following example configures a switch to accept DHCP packets with option-82 information from anuntrusted port:.ip dhcp snooping verifyThe ip dhcp snooping verify Global Configuration mode command configures a switch to verify on anuntrusted port that the source MAC address in a DHCP packet matches the client hardware address.Use the no form of this command to not verify the MAC addresses.console(config)# interface ethernet 1/e15console(config-if)# ip dhcp snooping trustconsole(config)#ip dhcp snooping information option allowed-untrustedbook.book Page 155 Thursday, December 18, 2008 7:40 PM
