Cisco 350 Series Administration Manual page 385

16
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 6
298
How the DHCP Snooping Binding Database is Built
The following describes how the device handles DHCP packets when both the DHCP client
and DHCP server are trusted. The DHCP Snooping Binding database is built in this process.
DHCP Trusted Packet Handling
The actions are:
Device sends DHCPDISCOVER to request an IP address or DHCPREQUEST to accept an IP
address and lease.
Device snoops packet and adds the IP-MAC information to the DHCP Snooping Binding
database.
Device forwards DHCPDISCOVER or DHCPREQUEST packets.
DHCP server sends DHCPOFFER packet to offer an IP address, DHCPACK to assign one, or
DHCPNAK to deny the address request.
Device snoops packet. If an entry exists in the DHCP Snooping Binding table that matches the
packet, the device replaces it with IP-MAC binding on receipt of DHCPACK.
Device forwards DHCPOFFER, DHCPACK, or DHCPNAK.
The following summarizes how DHCP packets are handled from both trusted and untrusted
ports. The DHCP Snooping Binding database is stored in non-volatile memory.
DHCP Snooping Packet Handling
Packet Type
DHCPDISCOVER
Arriving from Untrusted
Ingress Interface
Forward to trusted
interfaces only.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
IPv4 Management and Interfaces
Arriving from Trusted Ingress
Interface
Forwarded to trusted interfaces only.
IP Configuration