how to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?

petertch1986 · ‎07-31-2012

hello,everybody!

i got a problem ,

the company i am working in has 5 vlans which have been set an lay-3 switch(3560),

uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X)

well , that works ok~

now , i got my problem:

i need to force the client only can get ip by dhcp-relay server,

that means if anyone set static IP manunally ,

he can't really access to anywhere (to provent anyone set static IP with malignancy )

i know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )

the how to configure on a cisco 3560 ?

thank all , help me~

cadet alain · ‎07-31-2012

Hi,

I don't know if there is such a feature on Cisco switches but you can prevent people from changing their IP with

the DHCP snooping / IP source guard features.

Now if you're in a Windows domain environment you can also use a GPO to prevent people from changing their IP config

Regards.

Alain

Don't forget to rate helpful posts.