dhcp snooping deny

Use dhcp snooping deny to configure a port as DHCP packet blocking port.

Use undo dhcp snooping deny to restore the default.

Syntax

dhcp snooping deny

undo ipv6 dhcp snooping deny

Default

A port does not block DHCP packets.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

DHCP clients connected to DHCP packet blocking ports cannot obtain IP addresses and other configuration parameters from the DHCP server.

Do not configure a port as both a trusted port and a DHCP packet blocking port.

Examples

# Configure Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 as a DHCP packet blocking port.

<Sysname> system-view
[Sysname] interface Ten-GigabitEthernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dhcp snooping deny