configure ip-security dhcp-snooping information check
Description
Enables the DHCP relay agent option (option 82) checking in the server-originated packets.
Syntax Description
This command has no arguments or variables.
Default
N/A.
Usage Guidelines
-
When the option 82 is present in the packet, the MAC address specified in the remote-ID sub-option is the switch system MAC address. If the check fails, the packet is dropped.
-
When option 82 is not present in the packet, the DHCP packet is forwarded with no modification.
To disable this check, use the following command:
unconfigure ip-security dhcp-snooping information checkExample
The following command enables DHCP relay agent option checking:
configure ip-security dhcp-snooping information check
History
This command was first available in ExtremeXOS 12.1.
Platform Availability
This command is available on ExtremeSwitching 5320, 5420, 5520, and 5720 series switches.