topic Re: DHCP Snooping in Network Access Control

DHCP Snooping

javi1988 — Wed, 16 Dec 2020 15:06:23 GMT

Hello all,

I have enabled DHCP Snooping with " ip verify source port-security" and it works without problem, but the issue is that the entries in the binding tables are not removed after a PC is disconnected so if a laptop user moves from a port to another it can't access.

There is any solution for this?

Re: DHCP Snooping

MHM Cisco World — Wed, 16 Dec 2020 16:22:40 GMT

are you config aging time for port-security ?

Re: DHCP Snooping

balaji.bandi — Wed, 16 Dec 2020 16:46:38 GMT

where is DHCP Server , is the switch act as DHCP :

show ip source binding give you lease time for that IP.

Re: DHCP Snooping

thomas — Thu, 17 Dec 2020 00:16:46 GMT

I don't know if you are doing 802.1X but also know that Port-Security is not compatible with the authentication/dot1x configurations on the switch port. In general, we recommend that you do not enable port security when IEEE 802.1x is enabled.