Hi,
What is DHCP Snooping?
DHCP snooping is a security feature that acts as a firewall between untrusted hosts and trusted DHCP servers. The DHCP snooping feature performs the following activities:
•Validates DHCP messages received from untrusted sources and filters out invalid messages.
•Rate-limits DHCP traffic from trusted and untrusted sources.
•Builds and maintains the DHCP snooping binding database, which contains information about untrusted hosts with leased IP addresses.
•Utilizes the DHCP snooping binding database to validate subsequent requests from untrusted hosts.
Other security features, such as dynamic ARP inspection (DAI), also use information stored in the DHCP snooping binding database.
DHCP snooping is enabled on a per-VLAN basis. By default, the feature is inactive on all VLANs. You can enable the feature on a single VLAN or a range of VLANs.
ip dhcp snooping vlan 88
It will enable DHCP Snooping on VLAN 88.
no ip dhcp snooping information option
Disable the DHCP option-82 data insertion
DHCP option 82, also known as the DHCP relay agent information option, to help protect supported devices against attacks including spoofing (forging) of IP addresses and MAC addresses, and DHCP IP address starvation.
no ip dhcp snooping verify mac-address?
Disable DHCP snooping MAC address verification.
With DHCP snooping MAC address verification enabled, DHCP snooping verifies that the source MAC address and the client hardware address match in DHCP packets that are received on untrusted ports. The source MAC address is a Layer 2 field associated with the packet, and the client hardware address is a Layer 3 field in the DHCP packet.
ip dhcp snooping
Enable DHCP Snooping globally
no ip domain-lookup
Disable DNS resolution lookup on the router or switch.
ip name-server
Configuration of DNS server Ip address for Name lookup (DNS resolution).
Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
