Enable or Disable DHCP Snooping on a VLAN

Use the following procedure to configure DHCP Snooping on a specific VLAN. If DHCP Snooping is globally disabled, the switch forwards DHCP reply packets (received on trusted or untrusted ports) to all ports.

If you enable DHCP Snooping globally, the agent determines whether to forward DHCP reply packets based on the DHCP Snooping mode of the VLAN and trusted state of the port.

Note

You cannot enable DHCP Snooping on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

Enter VLAN Interface Configuration mode:

enable

configure terminal

interface vlan <1–4059>
Enable DHCP Snooping on the VLAN:

ip dhcp-snooping enable
Disable DHCP Snooping on the VLAN:

no ip dhcp-snooping enable

Example

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface vlan 5
Switch:1(config-if)#ip dhcp-snooping enable

Variable Definitions

The following table defines parameters for the ip dhcp-snooping command.


Variable	Value
enable	Enables or disables DHCP Snooping on the specified VLAN.