Dhcp Snooping And Switch Stacks; How To Configure Dhcp Features; Default Dhcp Snooping Configuration - Cisco Catalyst 2960-X Security Configuration Manual

DHCP Snooping and Switch Stacks

DHCP Snooping and Switch Stacks
DHCP snooping is managed on the stack master. When a new switch joins the stack, the switch receives the
DHCP snooping configuration from the stack master. When a member leaves the stack, all DHCP snooping
address bindings associated with the switch age out.
All snooping statistics are generated on the stack master. If a new stack master is elected, the statistics counters
reset.
When a stack merge occurs, all DHCP snooping bindings in the stack master are lost if it is no longer the
stack master. With a stack partition, the existing stack master is unchanged, and the bindings belonging to the
partitioned switches age out. The new master of the partitioned stack begins processing the new incoming
DHCP packets.

How to Configure DHCP Features

Default DHCP Snooping Configuration

Table 19: Default DHCP Configuration
Feature
DHCP server
DHCP relay agent
DHCP packet forwarding address
Checking the relay agent information
DHCP relay agent forwarding policy
DHCP snooping enabled globally
DHCP snooping information option
DHCP snooping option to accept packets on untrusted
input interfaces
DHCP snooping limit rate
DHCP snooping trust
DHCP snooping VLAN
DHCP snooping MAC address verification
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
216
4
Default Setting
Enabled in Cisco IOS software, requires configuration
3
Enabled
None configured
Enabled (invalid messages are dropped)
Replace the existing relay agent information
Disabled
Enabled
Disabled
None configured
Untrusted
Disabled
Enabled
Configuring DHCP
2
OL-29048-01