is "ip dhcp snooping database" optional?

[BenBen]

Hi,

I am planning to implement dhcp snooping. The main purpose is to fence off the rogue (spurious) DHCP servers (such as the home routers accidentally plugged into the network).

I know, DAI (Dynamic ARP Inspection) and IP source guard depending on the 'dhcp snooping database' to function properly. But we are not looking to implement these two functions.

My question is if we don't need 'DAI', neither 'IP source guard', is it a must to configure dhcp snooping data base? Or it is only optinal?

Thanks. 

[Karsten Iwen]

The database-agent is optional but highly recommended if you need to rely on the content of the database. Based on your needs, the database is not really used as all you need is the function of a trusted or untrusted port. I would say you can skip it without any problems.

[BenBen]

Thank you Karsten for the analysis. 

I will keep this open for a while and let others to comment.