cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1701
Views
5
Helpful
2
Replies

DHCP Snooping - Mac Verify Disable Advantage and Disadvantage

Yasmeen
Level 1
Level 1

Hi Team

          DHCP Snooping - Enables DHCP snooping MAC address verification.

         

      The no option disables MAC address verification - May i know the exact Advantage and disadvantage of it 

In my production switch i have done below commands.

ciscoswitch(config)# ip dhcp snooping
ciscoswitch(config)# ip dhcp snooping vlan number 100
ciscoswitch(config)# ip dhcp snooping vlan number 10-15 100 110
ciscoswitch(config)# ip dhcp snooping information option

switch(config)# ip dhcp snooping verify mac-address


ciscoswitch(config)# interface fa0/0
ciscoswitch(config-if)# ip dhcp snooping trust

 

 

We have One Simple Topology 

 

Switch  ========================> Netgear AP =====> wireless Bridge Unit ======> wired client 

( DHCP Server Running & Snooping) ===> Got IP DHCP IP===> Got DHCP IP =======> Didn't get DHCP IP 

 

After disable  ip dhcp snooping verify mac-address 

Last Wired Client got DHCP IP from DHCP Server

 

If i disable the ip dhcp snooping verify mac-address what will impact ?

Please let me know

Or DHCP Snooping trusted and Untrusted is enough ?

 

 

Thanks,

Yasmeen Shaul Hameed.

2 Replies 2

first 
DHCP Snooping is build DHCP IP with MAC address for each port, 
DAI will use this table to inspect the ARP packet.
using mac validate advance inspect by inspect the mac address in outer L2 header with inside mac address of ARP. 

Hi  MHM Cisco World

                  

                   IF i disable the Mac verify In interface what would be affect ?

                   Is there any alternate solution for allow the Mac verify and need to allow the ARP packets 

                   Please let me know