08-17-2021 10:26 AM - edited 08-18-2021 05:50 AM
Hi Team
DHCP Snooping - Enables DHCP snooping MAC address verification.
The no option disables MAC address verification - May i know the exact Advantage and disadvantage of it
In my production switch i have done below commands.
ciscoswitch(config)# ip dhcp snooping
ciscoswitch(config)# ip dhcp snooping vlan number 100
ciscoswitch(config)# ip dhcp snooping vlan number 10-15 100 110
ciscoswitch(config)# ip dhcp snooping information option
switch(config)# ip dhcp snooping verify mac-address
ciscoswitch(config)# interface fa0/0
ciscoswitch(config-if)# ip dhcp snooping trust
We have One Simple Topology
Switch ========================> Netgear AP =====> wireless Bridge Unit ======> wired client
( DHCP Server Running & Snooping) ===> Got IP DHCP IP===> Got DHCP IP =======> Didn't get DHCP IP
After disable ip dhcp snooping verify mac-address
Last Wired Client got DHCP IP from DHCP Server
If i disable the ip dhcp snooping verify mac-address what will impact ?
Please let me know
Or DHCP Snooping trusted and Untrusted is enough ?
Thanks,
Yasmeen Shaul Hameed.
08-18-2021 04:05 PM
first
DHCP Snooping is build DHCP IP with MAC address for each port,
DAI will use this table to inspect the ARP packet.
using mac validate advance inspect by inspect the mac address in outer L2 header with inside mac address of ARP.
08-18-2021 10:36 PM
IF i disable the Mac verify In interface what would be affect ?
Is there any alternate solution for allow the Mac verify and need to allow the ARP packets
Please let me know
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide