DHCP Snooping

[Raphael_L]

Hi ,

After all these years , is there any implementation of DHCP snooping yet ? I don't see any way to enable it , but access ports in trusted/untrusted state and so on.

I just did a test yesterday and I was able to snoop on DHCP requests made by another client.

Thanks ,

[BRUCE NEWTON]

Depend, what do you want to use DHCP Snooping for?

If you want to use it for security in conjunction with Dynamic ARP Inspection (DAI), then it’s there, https://documentation.meraki.com/MS/Other_Topics/Dynamic_ARP_Inspection. Beyond that there really isn’t much you can do with DHCP Snooping on the Meraki switches (other than block a rogue DHCP server).

[ww^]

You can only block/prevent unwanted dhcp servers.

https://documentation.meraki.com/MS/Monitoring_and_Reporting/MS_DHCP_Servers#Default_DHCP_Server_Policy

[joey.debra]

It does support DHCP snooping but the implementation is different.

It does not use a switchport to define where the offer/ack messages can come from but rather the MAC address of the originating server.

And it also has DAI which also relies on the snooping database.