source address and MAC source address are a legitimate pair, rather than validating each attributeindividually. You cannot configure IP+MAC SAV with IP SAV.1. Allocate at least one FP block to the ipmacacl CAM region.CONFIGURATION modecam-acl l2acl2. Save the running-config to the startup-config.EXEC Privilege modecopy running-config startup-config3. Reload the system.EXEC Privilegereload4. Do one of the following.• Enable IP+MAC SAV.INTERFACE modeip dhcp source-address-validation ipmac• Enable IP+MAC SAV with VLAN option.INTERFACE modeip dhcp source-address-validation ipmac vlan vlan-idDell Networking OS creates an ACL entry for each IP+MAC address pair and optionally with its VLAN ID inthe binding table and applies it to the interface.To display the IP+MAC ACL for an interface for the entire system, use the show ip dhcp snoopingsource-address-validation [interface] command in EXEC Privilege mode.Viewing the Number of SAV Dropped PacketsThe following output of the show ip dhcp snooping source-address-validation discard-counters command displays the number of SAV dropped packets.Dell>show ip dhcp snooping source-address-validation discard-countersdeny access-list on TenGigabitEthernet 1/1Total cam count 1deny count (0 packets)deny access-list on TenGigabitEthernet 1/2Total cam count 2deny vlan 10 count (0 packets)deny vlan 20 count (0 packets)The following output of the show ip dhcp snooping source-address-validation discard-counters interface interface command displays the number of SAV dropped packets on aparticular interface.Dell>show ip dhcp snooping source-address-validation discard-counters interfaceTenGigabitEthernet 1/1deny access-list on TenGigabitEthernet 1/1Total cam count 2268 Dynamic Host Configuration Protocol (DHCP)
