cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
400
Views
0
Helpful
4
Replies

Cisco C3064PQ DHCP Relay and DHCP Snooping issue

blackmetal
Level 1
Level 1

Hello,

We have pair of Cisco Nexus C3064PQ-10GX and we have 100x SVI, we want to use "ip dhcp relay address" command under the SVI to relay the DHCP request to our PXE boot DHCP server but when they want to relay the message my CPU usages goes to %50-60 and when I check the process I will see "dhcp_snoop" is using %30 of my CPU. i want just to use DHCP relay so i do not need DHCP snooping, is there anyway to disable it or how can i solve this?
i tried "no IP dhcp snooping" but it did not work.

here is my CPU process sorting:

show processes cpu sort
PID Runtime(ms) Invoked uSecs 1Sec Process
----- ----------- -------- ----- ------ -----------
3936 166268 162484 1023 31.25% dhcp_snoop

my software information:

Software
BIOS: version 5.0.0
NXOS: version 9.3(8)
Thanks.

4 Replies 4

NO IP dhcp snooping
NO ip dhcp snooping VLAN 

there are two command if you want to disable (meaning add NO to command) dhcp snooping disable both command. 
IF YOU WANT TO 

are you sure these commands disable them? i think we should use "no ip dhcp snooping VLAN " or "no ip dhcp snooping" does not it?

I correct my previous comment if I am right, 
anyway 
disable dhcp snooping is reduce your L2 security.
but let share with you something, 
during my reading cisco doc. many point mention that config dhcp relay and dhcp snooping together make issue. 
for example check below bug 

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvn03408

 

blackmetal
Level 1
Level 1

ip dhcp snooping will enable dhcp snooping, it does not disable it globally.

Review Cisco Networking for a $25 gift card