dhcp snooping questions

[javierjorda]

Dear all,

That's the topology i have on my real scenario, and we want to introduce dhcp snooping on it.

First time i tried with all trunk ports on all the switches (Except interCORE links) and DHCP Server on Sw-5 interface as trusted ports, but while debugging the DHCP negociation, we care that DHCP Server received DHCP request but the Client was unable to receive the DHCP reply.

Maybe i should set dhcp snooping only on Access layer interfaces?

What interfaces i have to mark as trusted?

What interfaces i have to mark as trusted for this other scenario?

Best regards,

Javier Jorda.

[Kyle McKay]

Hi Javier,

I would NOT recommend running DHCP Snooping on the core as there is really no reason for it if you are running it on the access layer. You are simply just adding an additional layer of complexity for no purpose.

From the access layer perspective, you enable DHCP Snooping trust on all uplinks and of course, any link that connects to a DHCP Server.

Hope this helps.