cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8373
Views
5
Helpful
15
Replies

DHCP snooping headache

cltrenholm
Level 1
Level 1

I have attempted to implement DHCP snooping and have been having some strange issues. I have 5 3560s taht I use for my edge and when I attempt to implement on all five, the VLAN that houses my voice data appears to no longer be able to recieve DHCP lease renewals so after the 24 expiration all of my phones lose their configs. Once I roll back the changes the voice VLAN comes back. The other VLANs seem to function correctly as theya re able to renew their DHCP addresses.

The 3560s tie into each other using GIG Ports 1 & 2 and the top and bottom switches tie into our core switch, a 4507. The config that I use is below, failry simple and straightforward.... I think?!?!?!

!

ip dhcp snooping vlan 1,2,3,etc.

ip dhcp snooping

!

interface GigabitEthernet0/1

description TRUNK to Core Switch

switchport trunk encapsulation dot1q

switchport mode trunk

ip dhcp snooping trust

!

interface GigabitEthernet0/2

description TRUNK to Core Switch

switchport trunk encapsulation dot1q

switchport mode trunk

speed 1000

duplex full

ip dhcp snooping trust

!

4 of the 5 switches feed our general office vlans for voice and data however the 5th switch is there for expansion and not in use. As such I have left the config changes in place on it and have tied myself and a colleague into it and have been operating fine for over a week now. So the config that I use seems sound in theory and should work on the other 4 switches with no issue.

I'm left scratching my head on this but can't understand what it is that I am missing. Any suggestions/advice would be helpful as I'm not sure how to proceed.

15 Replies 15

A dhcp request is a global broadcast to 255.255.255.255. Any dhcp server that can hear the broadcast will respond. The switch ports that connect to the aps should only allow the Vlans necessary; standard security practice.

Sent from Cisco Technical Support iPad App

Review Cisco Networking for a $25 gift card