only allow dhcp addresses leased from authorized DHCP server

[paulnigel]

Hi forum,

Is there a way to allow clients to received addresses from only authorized DHCP server?

I have incidents like some rogue DHCP server is setup in the network.

Kind regards,

paul

[paulnigel]

can I do it in this way;

access-list 150 permit udp host 172.16.160.29 any eq bootpc

access-list 150 deny udp any any eq bootpc

access-list 150 permit ip any any

access-list 150 permit udp any any

and then apply it to all my vlan interface as:

ip access-group 150 in

thanks,

[m.sir]

You can get DHCP snooping in place...

This feature protects your network from rogue DHCP server

check following link

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_1_13/config/dhcp.htm

M.

Hope that helps rate if it does

[paulnigel]

Thanks a lot! M, let me try this out. Thanks,