DHCP snooping on switch where DHCP server locally configured

[Mohammad Ramadan A.Hafiez]

Hello Guys,

                In case of the need to configure  DHCP snooping protection feature on a switch, you'll need to trust the switch port where the DHCP offer message "DHCP server port" will be sent as a trust port.

that about the case in which the switch ascts as the SHCP server and the DHCP service configured on it?

do I still need to trust a port? which port while this is locally configured?

or We simply don't need to trust any port?

sample configuration if possible please.

Thank you all,

MR

[Georg Pauwen]

Hello,

DHCP snooping is supposed to protect your network from unauthorized, external DHCP servers. If the switch itself is the only DHCP server, you don't need snooping at all. If you have both, you need to trust the ports where the external servers are connected to. The internal DHCP server does not need a trust port.

[Reza Sharifi]

Hi,

If the DHCP scope is configured locally on the switch than you don't need any trusted interface.

The traffic will be output from the switch to clients connected to access ports.

HTH