show ip-security dhcp-snooping violations

show ip-security dhcp-snooping violations [ {vlan} vlan_name | vlan vlan_list]

Description

Displays the MAC addressed from which the rouge DHCP (Dynamic Host Configuration Protocol) packet was received by the switch.

Syntax Description

vlan_name	Specifies the name of the DHCP-snooping VLAN (Virtual LAN).
vlan_list	Specifies the DHCP-snooping VLAN list of IDs.

Default

N/A.

Usage Guidelines

The switch displays the following DHCP snooping information:

Port—The specific port that received the rouge DHCP packet.
Violating MAC—The MAC address from which the rouge DHCP was received by the switch.

Example

The following sample output displays the DHCP snooping violations for the VLAN green:

# show ip-security dhcp-snooping violations green
Violations seen on following ports
-------------------------------------------
Port            Violating MAC
-------------------------------------------
2:3             00-0c-11-a0-3e-12

History

This command was first available in ExtremeXOS 11.6.

The vlan_list variable was added in ExtremeXOS 16.1.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.

Published July 2019prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback