Dhcp Snooping Binding Database - Cisco IE 3000 Software Configuration Manual
Hide thumbs
Also See for IE 3000:
- Hardware installation manual (186 pages) ,
- Getting started manual (32 pages) ,
- Software configuration manual (874 pages)
Table of Contents
Advertisement
Chapter 20
Configuring DHCP Features
In the port field of the circuit-ID suboption, the port numbers start at 3. For example, on a switch with
eight10/100 ports and small form-factor pluggable (SFP) module slots, port 3 is the Fast Ethernet 1/1
port, port 4 is the Fast Ethernet 1/2 port, and so forth. Port 11 is the SFP module slot 1/1, and so forth.
Figure 20-2
switch uses the packet formats when you globally enable DHCP snooping and enter the ip dhcp
snooping information option global configuration command.
Figure 20-2
Circuit ID Suboption Frame Format
Suboption
type
1 byte
Remote ID Suboption Frame Format
Suboption
type
1 byte
DHCP Snooping Binding Database
When DHCP snooping is enabled, the switch uses the DHCP snooping binding database to store
information about untrusted interfaces. The database can have up to 8192 bindings.
Each database entry (binding) has an IP address, an associated MAC address, the lease time (in
hexadecimal format), the interface to which the binding applies, and the VLAN to which the interface
belongs. The database agent stores the bindings in a file at a configured location. At the end of each entry
is a checksum that accounts for all the bytes from the start of the file through all the bytes associated
with the entry. Each entry is 72 bytes, followed by a space and then the checksum value.
To keep the bindings when the switch reloads, you must use the DHCP snooping database agent. If the
agent is disabled and only DHCP snooping is enabled, the switch does not lose its connectivity, but
DHCP snooping might not prevent DHCP spoofing attacks.
When reloading, the switch reads the binding file to build the DHCP snooping binding database. The
switch updates the file when the database changes.
OL-13018-01
–
Length of the suboption type
Remote-ID type
–
Length of the remote-ID type
–
shows the packet formats for the remote-ID suboption and the circuit-ID suboption. The
Suboption Packet Formats
Circuit
ID type
Length
Length
1
6
0
4
1 byte 1 byte 1 byte
Remote
ID type
Length
Length
2
8
0
6
1 byte 1 byte 1 byte
VLAN
Module Port
2 bytes
1 byte 1 byte
MAC address
6 bytes
Cisco IE 3000 Switch Software Configuration Guide
Understanding DHCP Features
20-5
Advertisement
Chapters
Table of Contents
Troubleshooting
