Configuring Authorized Server Addresses - HP E3800-24G-PoE+-2SFP+ Access Security Manual

HP Switch(config)# dhcp-snooping trust 1-2
HP Switch(config)# show dhcp-snooping
DHCP Snooping Information
DHCP Snooping
Enabled Vlans
Verify MAC
Option 82 untrusted policy : drop
Option 82 Insertion
Option 82 remote-id
Store lease database : Not configured
Port Trust
----- -----
_ 1 Yes
_ 2 Yes
_ 3 No
Figure 11-4. Example of Setting Trusted Ports
DHCP server packets are forwarded only if received on a trusted port; DHCP
server packets received on an untrusted port are dropped.
Use the no form of the command to remove the trusted configuration from a
port.

Configuring Authorized Server Addresses

If authorized server addresses are configured, a packet from a DHCP server
must be received on a trusted port AND have a source address in the autho-
rized server list in order to be considered valid. If no authorized servers are
configured, all servers are considered valid. You can configure a maximum of
20 authorized servers.
To configure a DHCP authorized server address, enter this command in the
global configuration context:
HP Switch(config)# dhcp-snooping authorized-server
Configuring Advanced Threat Protection
: Yes
: 4
: Yes
: Yes
: mac
<ip-address>
DHCP Snooping
11-7