dhcp snooping check enable (upgrade-compatible command)

Function

The dhcp snooping check enable enables the device to check DHCP messages.

The undo dhcp snooping check enable disables the device from checking DHCP messages.

By default, the device does not check DHCP messages.

Format

In the system view:

dhcp snooping check { user-bind | mac-address } enable vlan { vlan-id1 [ to vlan-id2 ] }&<1-10>

undo dhcp snooping check { user-bind | mac-address } enable vlan { vlan-id1 [ to vlan-id2 ] }&<1-10>

In the VLAN view, Ethernet interface view, GE interface view, XGE interface view, Eth-Trunk interface view, Port-group view:

dhcp snooping check { user-bind | mac-address } enable

undo dhcp snooping check { user-bind | mac-address } enable

Parameters

Parameter	Description	Value
user-bind	Check DHCP messages against the DHCP snooping binding table.	-
mac-address	Compare the MAC address in DHCP ACK or DHCP Request messages with the CHADDR value.	-
vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>	Enables the device to check the HCP messages from a specified VLAN to the processing unit. vlan-id1 specifies the first VLAN ID. to vlan-id2 specifies the last VLAN ID. vlan-id2 must be larger than vlan-id1.	The value is an integer that ranges from 1 to 4094.

Views

VLAN view, System view, Ethernet interface view, GE interface view, XGE interface view, Eth-Trunk interface view, Port-group view

Default Level

2: Configuration level

Usage Guidelines

This command is available to aid upgrade compatibility. It can be run when it is entered in full.

After the command is used, you can check DHCP messages against the DHCP snooping binding table or Compare the MAC address in DHCP ACK or DHCP Request messages with the CHADDR value.

Example

# Enable the function of checking DHCP messages against the binding table in VLAN 100.

<HUAWEI> system-view
[HUAWEI] vlan 100
[HUAWEI-vlan100] dhcp snooping check user-bind enable