DHCP Snooping in Cat6k (CAtOS 8.4)

[kycheong]

Hi, I'd like to undertand what is the usage of "DHCP-Snooping Host-Tracking Information Option", when will that be used ? is it advisable to configured ? If someone can share with an example, that will be very much appreciated.

Thanks

KY

[amikat]

Hi,

Option 82 with DHCP enables to add port and local switch information to DHCP request.

This can be used by SP or Enterprise customers to:

-Identify each user,

-Perform subscriber management,

-Assign IP addresses based on switch port and subscriber info.

Best regards,

Antonin

[sachinraja]

This is what is given in cisco :

DHCP Snooping provides security by filtering trusted DHCP messages and then using these messages to build and maintain a DHCP snooping binding table. DHCP Snooping considers DHCP messages originating from any user facing port that is not a DHCP server port or an upling to a DHCP server as untrusted.

The DHCP snooping binding table contains the MAC address, IP address, lease time, binding type, VLAN number, and interface information corresponding to the local untrusted interfaces of a switch; it does not contain information regarding hosts interconnected with a trusted interface

This can really help you to mitigate MAC address spoofing..

Hope this helps..

Raj