Configuring Switching Information 451DHCP Snooping VLAN ConfigurationThe DHCP snooping application does not forward server messages because they are forwarded inhardware.DHCP snooping forwards valid DHCP client messages received on non-routing VLANs. The message isforwarded on all trusted interfaces in the VLAN.DHCP snooping can be configured on switching VLANs and routing VLANs. When a DHCP packet isreceived on a routing VLAN, the DHCP snooping application applies its filtering rules and updates thebindings database. If a client message passes filtering rules, the message is placed into the softwareforwarding path, where it may be processed by the DHCP relay agent, the local DHCP server, orforwarded as an IP packet.DHCP snooping is disabled globally and on all VLANs by default. Ports are untrusted by default.To access the DHCP Snooping VLAN Configuration page, click Switching →DHCP Snooping →VLANConfiguration in the navigation tree.Figure 7-117. DHCP Snooping VLAN ConfigurationThe DHCP Snooping VLAN Configuration page contains the following fields:Table 7-66. DHCP Snooping Interface Configuration CommandsCLI Command Descriptionip dhcp snooping limit Controls the maximum rate of DHCP messages.ip dhcp snooping log-invalid Enables logging of DHCP messages filtered by the DHCP Snoopingapplication.ip dhcp snooping trust Configure a port as trusted for DHCP snooping.show ip dhcp snooping interfaces Displays the DHCP Snooping status of the interfaces.
