Can i prevent DHCP broadcast from passing throught certain port

[mahmoudyf]

Hi,

I have 2 locations connected throught VPN link through Cisco switches 2960, each location has a lan and has a dhcp server.

can i prevent dhcp broadcst on switch port from passing to vpn link.

Thanks in Advance

[mahmoudyf]

Ok,

but i make the routers working as a switch, and the two branches are in the same network, So i want to prevent DHCP broadcast through the wan link.

you got it?

[wandering_997]

I think port-based ACL can limit DHCP broadcast packets crossing the wan link.

For example:

deny udp any any eq 67

deny udp any eq 67 any

I'm basing the statements on the wan link does not require any DHCP traffic.

[mahmoudyf]

All right that i want to implement

but the port-based ACL can be configured on the switch 2960 or 3750

[wandering_997]

This is a example of applying IPv4 ACL on a 2960 layer 2 interface.

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_25_see/configuration/guide/swacl.html#wp1285654

HTH

[mahmoudyf]

Right