The dhcp snooping enable no-user-binding command disables the interfaces from generating DHCP snooping binding entries after DHCP snooping is enabled.
The undo dhcp snooping enable no-user-binding command restores the default setting.
By default, an interface generates DHCP snooping binding entries after DHCP snooping is enabled.
System view:
dhcp snooping enable no-user-binding vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>
undo dhcp snooping enable no-user-binding vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>
VLAN view, interface view:
dhcp snooping enable no-user-binding
undo dhcp snooping enable no-user-binding
| Parameter | Description | Value |
|---|---|---|
vlan { vlan-id1 [ to vlan-id2 ] } |
Disables the interfaces in the specified VLANs from generating DHCP snooping binding entries.
|
The value is an integer that ranges from 1 to 4094. |
System view, VLAN view, Ethernet interface view, GE interface view, XGE interface view, 25GE interface view, MultiGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view
Use Scenario
After DHCP snooping is enabled on a device, the device generates DHCP snooping binding entries for users by default. If the number of binding entries on the device reaches the upper limit, new users cannot go online. In certain scenarios, for example, on a trusted DHCP network, if you do not want to limit the number of online users but want to record user location information, run the dhcp snooping enable no-user-binding command to disable the device from generating DHCP snooping binding entries.
When the command is executed in an interface view, the command takes effect for all DHCP users connecting to the interface. When the command is executed in the VLAN view, the command takes effect for all the DHCP users belonging to this VLAN on all interfaces. When the command is executed in the system view, the command takes effect in the same way as it is executed in the VLAN view, except that multiple VLANs can be specified.
Prerequisites
DHCP snooping has been enabled using the dhcp snooping enable command.
Precautions
After this command is executed, the device deletes the binding entries from the corresponding VLAN or interface.
If the DHCP snooping binding entry-dependent function such as IPSG or DAI is configured on the device, the corresponding function does not take effect after this command is run.
This command cannot be used together with dhcp snooping check dhcp-request enable; otherwise, online users cannot go offline.
# In the system view, disable the interfaces in VLAN 10 and VLAN 20 from generating DHCP snooping binding entries.
<HUAWEI> system-view [HUAWEI] dhcp enable [HUAWEI] dhcp snooping enable [HUAWEI] dhcp snooping enable vlan 10 20 [HUAWEI] dhcp snooping enable no-user-binding vlan 10 20
# In the VLAN view, disable the interfaces in VLAN 10 from generating DHCP snooping binding entries.
<HUAWEI> system-view [HUAWEI] dhcp enable [HUAWEI] dhcp snooping enable [HUAWEI] vlan 10 [HUAWEI-vlan10] dhcp snooping enable [HUAWEI-vlan10] dhcp snooping enable no-user-binding
# In the interface view, disable GE0/0/1 from generating DHCP snooping binding entries.
<HUAWEI> system-view [HUAWEI] dhcp enable [HUAWEI] dhcp snooping enable [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] dhcp snooping enable [HUAWEI-GigabitEthernet0/0/1] dhcp snooping enable no-user-binding