Solved: DHCP Snooping and Static IP Addresses

Gregman3800 · ‎07-02-2024

When using DHCP Snooping along with static IP addresses I understand that you will need to add those IP addresses to the binding database for DAI and IP verify source to work. My question is if this is worth it? It seems like a huge pain to list all of these IP addresses and possibly MAC addresses manually. Just wanted to know what the community thinks about this hardening requirement. Thanks!

M02@rt37 · ‎07-02-2024

Hello @Gregman3800

This approach significantly enhances network security, it involves a substantial administrative burden when static IP addresses are used, as each static IP and its corresponding MAC address must be manually added to the DHCP Snooping binding database. This task is labor-intensive and error-prone, especially in large networks, leading to potential scalability issues and the risk of misconfigurations that could disrupt network operations...

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

View solution in original post