Chapter 8: Security Suite; Dhcp Snooping - Cisco SPS208G User Manual

Security Suite

DHCP Snooping

SPS208G/SPS224G4/SPS2024 Service Provider Switches User Guide
The Security Suite configuration options are as follows:
•
DHCP Snooping
•
DHCP VLANs
•
DHCP Trusted Interfaces
•
DHCP Database
•
ARP Inspection
•
ARP Trusted Interfaces
•
ARP Inspection List
•
ARP VLANs
•
IP Source Guard
•
IP Source Guard Database
DHCP Snooping enables network administrators to differentiate between trusted
interfaces connected to end-users or DHCP Servers and untrusted interfaces
located beyond the network firewall.
DHCP Snooping filters untrusted messages. DHCP Snooping creates and
maintains a DHCP Snooping Table which contains information received from
untrusted packets. Interfaces are untrusted if the packet is received from an
interface outside the network or from an interface beyond the network firewall.
Trusted interfaces receive packets only from within the network or the network
firewall.
The DHCP Snooping Table contains the untrusted interfaces' MAC address, IP
address, Lease Time, VLAN ID, and interface information.
8
133