Enabling DHCP Snooping for profiling without blocking DHCP requests
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-27-2016 02:13 PM - edited 03-10-2019 11:42 PM
I am reading through a lot of documentation trying to increase my knowledge on how ISE Profiling works.
I have found many design guides that say to enable these commands:
ip dhcp snooping
ip dhcp snooping vlan [VLAN ID's]
I understand the basic concept of what DHCP snooping does, but if I enable it and enable it on a VLAN, what is preventing the switch from dropping the DHCP packets because I havent configured any of the dhcp trust interfaces?
- Labels:
-
AAA
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-30-2016 11:16 AM
Hi Brian-
If you want to use DHCP Snooping then you must define the trusted ports. Otherwise, as you have already mentioned, your clients will not get addresses from DHCP.
With that being said, what are your concerns with enabling trust interfaces?
Thank you for rating helpful posts!
