cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
370
Views
0
Helpful
2
Replies
Highlighted
Beginner

DHCP Snooping trusting question

I'm studying for my Cisco Security exam and it's going deeper into detail on its decision making process (pretty simple) but I'm not seeing how to make it trust itself, or if it does by default. What I mean is, I can understand that it was intended to be used on a device that is CONNECTED to a DHCP server, and to trust the PORT it's attached to, and that it's enabled PER VLAN, but then it just moves on without addressing "What if the switch that has DHCP Snooping enabled IS the DHCP server?" And I haven't been able to get an answer from Google or these boards. So the question is, if the switch is giving out DHCP addresses on all but one VLAN, do I have to establish trust somewhere, and if so, how do I do that? Or am I forced to have an external DHCP server if I'm running DHCP Snooping?

 

If it helps, I'm using a WS-C3750-24P switch with L3 routing enabled, running IOS 12.2(55)

Everyone's tags (2)
2 REPLIES 2
VIP Advisor

Re: DHCP Snooping trusting question

yes you can use Same Device act as DHCP Server, if you want to source the DHCP From external, use DHCP help address to external DHCP Server.

 

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: DHCP Snooping trusting question

Just to clarify, you're saying that the switch automatically trusts itself and doesn't filter DHCP traffic originating from its own server?