DHCP Snooping

The nv unset commands remove the configuration you set with the equivalent nv set commands. This guide only describes an nv unset command if it differs from the nv set command.


nv set bridge domain <domain-id> dhcp-snoop vlan <vid>

Enables DHCP snooping for IPv4 on a VLAN under a bridge.

Command Syntax

SyntaxDescription
<domain-id>The bridge name.
<vlan-id>The VLAN name.

Version History

Introduced in Cumulus Linux 5.11.0

Example

cumulus@switch:~$ nv set bridge domain br_default dhcp-snoop vlan 10

nv set bridge domain <domain-id> dhcp-snoop vlan <vid> trust <interface-id>

Configures a trusted interface for IPv4. Cumulus Linux allows DHCP offers from only trusted interfaces to prevent malicious DHCP servers from assigning IPv4 addresses inside the network. The interface must be a member of the bridge you specify.

Command Syntax

SyntaxDescription
<domain-id>The bridge name.
<vlan-id>The VLAN name.
<interface-id>The trusted interface ID.

Version History

Introduced in Cumulus Linux 5.11.0

Example

cumulus@switch:~$ nv set bridge domain br_default dhcp-snoop vlan 10 trust swp3

nv set bridge domain <domain-id> dhcp-snoop6 vlan <vid>

Enables DHCP snooping for IPv6 on a VLAN under a bridge.

Command Syntax

SyntaxDescription
<domain-id>The bridge name.
<vlan-id>The VLAN name.

Version History

Introduced in Cumulus Linux 5.11.0

Example

cumulus@switch:~$ nv set bridge domain br_default dhcp-snoop6 vlan 10

nv set bridge domain <domain-id> dhcp-snoop6 vlan <vid> trust <interface-id>

Configures a trusted interface for IPv6. Cumulus Linux allows DHCP offers from only trusted interfaces to prevent malicious DHCP servers from assigning IPv6 addresses inside the network. The interface must be a member of the bridge you specify.

Command Syntax

SyntaxDescription
<domain-id>The bridge name.
<vlan-id>The VLAN name.
<interface-id>The trusted interface ID.

Version History

Introduced in Cumulus Linux 5.11.0

Example

cumulus@switch:~$ nv set bridge domain br_default dhcp-snoop6 vlan 10 trust swp3