Configure DHCP Snooping

[Ian Dewar]

Can you help with this lab?

Configure Sw1:

• Enable DNCP Snooping for VLAN 10
• Disable DHCP Option-82 data insertion
• Enable DHCP Snooping MAC address verification
• Enable trusted interfaces

[MHM Cisco World]

In which step you stop

[Ian Dewar]

Is this correct?

[MHM Cisco World]

Nope not need all this' 

1-As your request disable op-82

No ip dhcp snooping inforomation 

2- enable dhcp snooping 

Ip dhcp snooping 

Ip dhcp snooping vlan x 

3- config trust 

Interface x/x

Ip dhcp snooping trust 

4- verify mac' if you face issue with dhcp snooping then remove this command 

Ip dhcp snooping verify mac-address

[Ian Dewar]

Like this:

Conf t
Ip dhcp snooping vlan 10
no Ip dhcp snooping information
Ip dhcp snooping verify mac-address
Ip dhcp snooping trust

[MHM Cisco World]

Except this command 

Ip dhcp snooping trust

Above command must add under interface of SW direct content or point to DHCP server ' 

Note:- for SW1 this command must add under interfac e0/1 and e0/2 only.

It not config in global 

[Ian Dewar]

Like this:

Conf t
Interface
Ip dhcp snooping vlan 10
no Ip dhcp snooping information
Ip dhcp snooping verify mac-address
Ip dhcp snooping trust

[MHM Cisco World]

Nop' check above my comment 

[Ian Dewar]

Like this:

Conf t
Interface range e0/1-2
Ip dhcp snooping vlan 10
no Ip dhcp snooping information
Ip dhcp snooping verify mac-address
Ip dhcp snooping trust

[MHM Cisco World]

Ip dhcp snooping vlan 10
no Ip dhcp snooping information
Ip dhcp snooping verify mac-address

!

Interface range e0/1-2
Ip dhcp snooping trust

[Flavio Miranda]

Hi

  This lab on PacketTracer works fine.

Not sure which simulator you are using and we must consider some limitation on the PacketTracer.

[MHM Cisco World]

I think he is new reading this topic' 

Can you help him and give him link of packet tracer new versions.

He need software to test the config.

Thanks 

MHM

[Ian Dewar]

I tried opening the file and got this:

How do i update to this version?

[Flavio Miranda]

I believe you need to download a new one from cisco site.

But you can make it work on yours.

 Put the interface to the router as trust.

On the botton switches put both trunk and

PC port as trust ports.

Conf t

Interface X

Ip dhcp snooping trust

On the Upper switch you need to add the commamd on the trunk also

Ip dhcp snooping trust

It shoud be enouth.

[paul driver]

Hello
 Enable DNCP Snooping for VLAN 10   
Dhcp snooping should be applied on sw1,2,3
ip dhcp snooping 
ip dhcp snooping vlan 10 

• Disable DHCP Option-82 data insertion
Disabled by default

• Enable DHCP Snooping MAC address verification
Globally enabled
ip dhcp snooping verify mac-address

• Enable trusted interfaces
Dhcp snooping should be applied on sw1,2,3
Trusted interfaces  applied to - Sw1-2  (eth0/1, eth0/2)  Sw3 (eth0/1,eth0.2, eth1/0)