DHCP Snooping Configuration on Core Cisco switches

[pheycel]

Is it good to have DHCP snooping configured on core switches or not. Just implementati DHCP snooping on  access layer switches is fine?

[M02@rt37]

Hello @pheycel,

It is common and effective to implement DHCP snooping primarily at the access layer switches to secure against DHCP-related attacks. If DHCP servers are at the core, enabling DHCP snooping there provides an additional layer of security, but the core is not the primary location for DHCP snooping implementation. Always tailor your security measures to your specific network design and requirements.

Also please find informtations in a former thread:

https://community.cisco.com/t5/switching/design-questions-for-dhcp-snooping/td-p/1271180

[pheycel]

thanks

[M02@rt37]

You're welcome @pheycel 

[MHM Cisco World]

On access SW in which your host connect you need to config dhcp snooping in core SW you dont need that.