cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

1457
Views
0
Helpful
1
Replies
Highlighted
Beginner

how to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?

how to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?

hello,everybody!

i got a problem ,

the company i am working in has 5 vlans which have been set an lay-3 switch(3560),

uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X)

well , that works ok~

now , i got my problem:

i need to force the client only can get ip by dhcp-relay server,

that means if anyone set static IP manunally ,

he can't really access to anywhere (to provent anyone set static IP with malignancy )

i know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )

the how to configure on a cisco 3560 ?

thank all , help me~

1 REPLY 1
Advisor

how to configure cisco 3560 to force the client only can get ip

Hi,

I don't know if there is such a feature on Cisco switches but you can prevent people from changing their IP with

the DHCP snooping / IP source guard features.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/swdhcp82.html

Now if you're in a Windows domain environment you can also use a GPO to prevent  people from changing their IP config

Regards.

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
CreatePlease to create content
Content for Community-Ad