Defining Dhcp Snooping On Vlans - Cisco SGE2000 - - Gigabit Switch Administration Manual

Configuring Device Security
Defining DHCP Snooping
STEP 2
STEP 3
Cisco Small Business SFE/SGE Managed Switches Administration Guide
-
Unchecked
default value.
•
Option 82 Passthrough — Indicates if the device forwards or rejects packets
that include Option 82 information, while DHCP Snooping is enabled.
-
Checked — Device forwards packets containing Option 82 information.
-
Unchecked — Device rejects packets containing Option 82 information.
•
Verify MAC Address — Indicates if the MAC address is verified. The possible
field values are:
-
Checked
— Verifies (on an untrusted port) that the source MAC address
of the Layer 2 header matches the client hardware address as appears
in the DHCP Header (part of the payload).
-
Unchecked
Layer 2 header matches the client hardware address as appears in the
DHCP Header. This is the default value.
•
Backup Database — Indicates if the DHCP Snooping Database learning and
update is enabled. All changes to the binding storage file are implemented only
if the device's system clock is synchronized with the SNTP Server. The
possible field values are:
-
Checked
— Enables backing up of the allotted IP address in the DHCP
Snooping Database.
-
Unchecked
DHCP Snooping Database. This is the default value.
•
Database Update Interval — Indicates how often the DHCP Snooping
Database is backed up. The possible field range is 600 – 86400 seconds. The
field default is 1200 seconds.
Modify the relevant fields.
Click Apply. The settings are defined, and the device is updated.

Defining DHCP Snooping on VLANs

DHCP Snooping VLAN Settings Page
The
DHCP snooping on VLANs. To enable DHCP Snooping on a VLAN, ensure DHCP
Snooping is enabled on the device.
— Disables DHCP Snooping on the device. This is the
— Disables verifying that the source MAC address of the
— Disables backing up to the allotted IP address in the
allows network managers to enable
4
129