How to block using DHCP on switches

[Luis Carranza]

Hi guys

I need your help with something, here in the office we got a DHCP Pool on the core switches and we need to configure some kind of restriction using the DHCP. What I'm trying to say is this. if a user is trying to configure a static IP on his device he don't be allow to use the network, it will only work using the DHCP pool assigned to the users.

Is there some kind of configuration like switchport security or something similar but using the DHCP pool.?

Regards

[Leo Laohoo]

I am no Windows AD person but I know AD/Group Policy can do this.

[Ajay Saini · Accepted solution]

Dhcp snooping with dynamic arp inspection or ip source guard can help you achieve this. Please review following links:

http://packetlife.net/blog/2010/aug/18/dhcp-snooping-and-dynamic-arp-inspection/

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/configuration/guide/sy_swcg/ip_source_guard.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dynarp.html

-

AJ

[paul driver]

Hello

Snooping - DAI and IPSG will not assist here

To negate users from applying statics to their pcs would require a local group policy on each pc to tie down access to the nic properties

This is something active directory can do but not i am aware it's possible from a Cisco perspective

res

paul

[Luis Carranza]

Thank you all for all the asnwers, A friend told something about Snooping and dynamic arp but i couldn't find anything. So I will test this on la lab and hope it works.

Regards