Configuring An Interface As Trusted Or Untrusted - Cisco Nexus 9000 Series Configuration Manual
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring an Interface as Trusted or Untrusted
Configuring an Interface as Trusted or Untrusted
You can configure whether an interface is a trusted or untrusted source of DHCP messages. By default, all
interfaces are untrusted. You can configure DHCP trust on the following types of interfaces:
• Layer 2 Ethernet interfaces
• Layer 2 port-channel interfaces
Before you begin
Make sure that the DHCP feature is enabled.
Make sure that the interface is configured as a Layer 2 interface.
SUMMARY STEPS
1. configure terminal
2. Do one of the following options:
3. [no] ip dhcp snooping trust
4. (Optional) show running-config dhcp
5. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
Do one of the following options:
• interface ethernet slot/port
• interface port-channel channel-number
Example:
switch(config)# interface ethernet 2/1
switch(config-if)#
Step 3
[no] ip dhcp snooping trust
Example:
switch(config-if)# ip dhcp snooping trust
Step 4
(Optional) show running-config dhcp
Example:
switch(config-if)# show running-config dhcp
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
344
• interface ethernet slot/port
• interface port-channel channel-number
Purpose
Enters global configuration mode.
• Enters interface configuration mode, where slot/port
is the Layer 2 Ethernet interface that you want to
configure as trusted or untrusted for DHCP snooping.
• Enters interface configuration mode, where slot/port
is the Layer 2 port-channel interface that you want to
configure as trusted or untrusted for DHCP snooping.
Configures the interface as a trusted interface for DHCP
snooping. The no form of this command configures the port
as an untrusted interface.
Displays the DHCP configuration.
Configuring DHCP
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
