show ip-security dhcp-snooping violations

show ip-security dhcp-snooping violations [ {vlan} vlan_name | vlan vlan_list]

Description

Displays the MAC addressed from which the rouge DHCP packet was received by the switch.

Syntax Description

vlan_name Specifies the name of the DHCP-snooping This command is available on the ExtremeSwitching X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, 5520 series switches..
vlan_list Specifies the DHCP-snooping VLAN list of IDs.

Default

N/A.

Usage Guidelines

The switch displays the following DHCP snooping information:
  • Port—The specific port that received the rouge DHCP packet.
  • Violating MAC—The MAC address from which the rouge DHCP was received by the switch.

Example

The following sample output displays the DHCP snooping violations for the VLAN green:

# show ip-security dhcp-snooping violations green
Violations seen on following ports
-------------------------------------------
Port            Violating MAC
-------------------------------------------
2:3             00-0c-11-a0-3e-12

History

This command was first available in ExtremeXOS 11.6.

The vlan_list variable was added in ExtremeXOS 16.1.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.