Enabling DHCP Snooping

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Enterprise

Worldwide

Huawei Global - English

DHCP snooping ensures security of the DHCP service. Before configuring DHCP snooping functions, you need to enable DHCP snooping.

You must enable DHCP snooping in the system view, and then on an interface, in a bridge domain (BD) or in a VLAN.

Use the dhcp enable command to enable DHCP globally before enabling DHCP snooping.

On a CE12800E, this function cannot be configured in the BD view.

Run system-view
The system view is displayed.
Run dhcp snooping enable
DHCP snooping is globally enabled.

By default, DHCP snooping is globally disabled on the device.
Enable DHCP snooping in the system, VLAN, BD view or interface view.
- In the system view:
1. Run dhcp snooping enable vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>
  DHCP snooping is enabled on the device.
  
  By default, DHCP snooping is disabled on the device.
- In the VLAN view ,BD view or interface view:
1. Run vlan vlan-id
  The VLAN view is displayed.
  
  Or run bridge-domain bd-id
  
  The BD view is displayed.
  
  Or run interface interface-type interface-number
  
  The interface view is displayed.
2. Run dhcp snooping enable
  DHCP snooping is enabled on the interface, in a BD or in a VLAN.
  
  By default, DHCP snooping is disabled on the device.
  
  If you run this command in the VLAN view, the command takes effect on all the DHCP messages received by all interfaces from the specified VLAN. If you run this command in the interface view, the command takes effect on all the DHCP messages received by the specified interface. If you run this command in the BD view, the command takes effect on all the DHCP messages received in the specified BD.
Run commit
The configuration is committed.