Configuring Dhcp Snooping - Dell PowerConnect 54 Series User Manual

The following is an example of some of the CLI commands:
Switch# show access-lists
IP access list ACL1
permit 234 172.30.40.1 0.0.0.0 any
permit 234 172.30.8.8

Configuring DHCP Snooping

DHCP Snooping expands network security by providing firewall security between untrusted interfaces and
DHCP servers. By enabling DHCP Snooping network administrators can differentiate between trusted
interfaces connected to end-users or DHCP Servers and untrusted interfaces located beyond the network
firewall.
DHCP Snooping filters untrusted messages. DHCP Snooping creates and maintains a DHCP Snooping
Table which contains information received from untrusted packets. Interfaces are untrusted if the packet is
received from an interface outside the network or from an interface beyond the network firewall. Trusted
interfaces receive packets only from within the network or the network firewall.
The DHCP Snooping Table contains the untrusted interfaces' MAC address, IP address, Lease Time, VLAN
ID, and interface information.
The DHCP section contains the following topics:
• Defining DHCP Snooping Properties
• Defining DHCP Snooping on VLANs
• Defining Trusted Interfaces
• Adding Interfaces to the DHCP Snooping Database
Defining DHCP Snooping Global Parameters
The DHCP Snooping Global Parameters page contains parameters for enabling and configuring DHCP
Snooping on the device.
To define DHCP global parameters, click Switch→ DHCP Snooping → Global Parameters.
240
Configuring Device Information
0.0.0.0 any