02-18-2014 01:56 AM - edited 03-07-2019 06:16 PM
We have WS-C3560V2-24TS with IOS 15.0(2)SE5.
I am configuring dhcp snooping.
dhcp snooping enabled globally, enabled for needed vlan, option 82 disabled, only incoming interface trusted.
Clients are getting ip addresses from DHCP normally, but i dhcp snooping bindings table is empty.
can't understand why that happens.
---
show ip dhcp snoo
Switch DHCP snooping is enabled
DHCP snooping is configured on following VLANs:
1-4000
DHCP snooping is operational on following VLANs:
1,9-10,581
Smartlog is configured on following VLANs:
none
Smartlog is operational on following VLANs:
none
DHCP snooping is configured on the following L3 Interfaces:
Insertion of option 82 is disabled
circuit-id default format: vlan-mod-port
remote-id: 5897.1eee.a900 (MAC)
Option 82 on untrusted port is not allowed
Verification of hwaddr field is enabled
Verification of giaddr field is enabled
DHCP snooping trust/rate is configured on the following Interfaces:
Interface Trusted Allow option Rate limit (pps)
----------------------- ------- ------------ ----------------
GigabitEthernet0/1 yes yes unlimited
Custom circuit-ids:
GigabitEthernet0/2 yes yes unlimited
Custom circuit-ids:
----
Client interface:
!
interface FastEthernet0/1
switchport access vlan 581
switchport mode access
switchport nonegotiate
spanning-tree portfast
spanning-tree bpduguard enable
!
--
Incoming interface:
!
interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
ip dhcp snooping trust
!
--
Bindings
show ip dhcp snoo bin
MacAddress IpAddress Lease(sec) Type VLAN Interface
------------------ --------------- ---------- ------------- ---- --------------------
Total number of bindings: 0
02-21-2014 12:35 AM
Anyone? Any ideas?
Still can't figure out...
10-06-2014 07:23 AM
I had the same problem, and the version c2960s-universalk9-mz.150-2.SE6.bin dor a 2960S or c2960-lanbasek9-mz.150-2.SE6.bin for a 2960 non S solves the problem too. I guess it would be solve for your hardware.
02-25-2014 03:29 AM
rolled back to c3560-ipservicesk9-mz.122-58.SE2.bin
and problem resolved.
Thank you for lots of help.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: