DHCP Spoofing

[Azeem Dawood]

Dear Experts,

Hi, i wanted to configure our core switch for DHCP snooping. But the DHCP snooping concept says, the interface shud be set to trust where the DHCP is connected. But in my case my core switch itself is a DHCP server. so how can i configure DHCP snooping on it. I googled almost everthing but found no answer. If anyone of you have done this in actual production network pls suggest the steps to configure.

Just for a review, i wanted to apply all the security settings on my switches to prevent all kind of hacking activities.

Thanks,

Azeem                 

[cadet alain]

Hi,

in this case you have nothing special to configure apart from this:

ip dhcp snooping

ip dhcp snooping vlan x

But DHCP snooping should be configured on access/distribution switches instead of core and then you'll have to trust the uplinks to your core switch which is the legal DHCP server.

Regards

Alain

Don't forget to rate helpful posts.

[Azeem Dawood]

Thanks alot Alain. I will check..

[paul driver]

Hello,

Just like to add to that- If you have dhcp clients on other access switches then as stated snooping is require on these switches also and the uplinks trusted  between these other switches and the core.

res

Paul

Please don't forget to rate this post if it has been helpful.