Operation Manual – DHCPH3C S3100 Series Ethernet Switches Chapter 2 DHCP Snooping Configuration2-14Operation Command DescriptionEnable IP filteringip check sourceip-address[ mac-address ]RequiredBy default, this function isdisabled.Create an IP static bindingentryip source static bindingip-address ip-address[ mac-addressmac-address ]OptionalBy default, no staticbinding entry is created.Note:z Enable DHCP snooping and specify trusted ports on the switch before configuringIP filtering.z You are not recommended to configure IP filtering on the ports of an aggregationgroup.z To create a static binding after IP filtering is enabled with the mac-address keywordspecified on a port, the mac-address argument must be specified; otherwise, thepackets sent from this IP address cannot pass the IP filtering.z A static entry has a higher priority than the dynamic DHCP snooping entry that hasthe same IP address as the static one. That is, if the static entry is configured afterthe dynamic entry is recorded, the static entry overwrites the dynamic entry; if thestatic entry is configured before DHCP snooping is enabled, no DHCP client canobtain the IP address of the static entry.z The VLAN ID of the IP static binding configured on a port is the default VLAN ID ofthe port.2.4 Displaying DHCP Snooping ConfigurationAfter the above configurations, you can verify the configurations by executing thedisplay command in any view.
