Defining Dhcp Snooping On Vlans - Cisco ESW 500 Administration Manual

Configuring Device Security
Defining DHCP Snooping
STEP 2
STEP 3
ESW 500 Series Switches Administration Guide
-
Checked
— Verifies (on an untrusted port) that the source MAC address
of the Layer 2 header matches the client hardware address as appears
in the DHCP Header (part of the payload).
-
Unchecked
Layer 2 header matches the client hardware address as appears in the
DHCP Header. This is the default value.
•
Backup Database — Indicates if the DHCP Snooping Database learning and
update is enabled. All changes to the binding storage file are implemented only
if the device's system clock is synchronized with the SNTP Server. The
possible field values are:
-
Checked
— Enables backing up of the allotted IP address in the DHCP
Snooping Database.
-
Unchecked
DHCP Snooping Database. This is the default value.
•
Database Update Interval — Indicates how often the DHCP Snooping
Database is backed up. The possible field range is 600 – 86400 seconds. The
field default is 1200 seconds.
Define the relevant fields.
Click Apply. The DHCP Snooping configuration is defined and the device is
updated.

Defining DHCP Snooping on VLANs

DHCP Snooping VLAN Settings Page
The
DHCP snooping on VLANs. To enable DHCP Snooping on a VLAN, ensure DHCP
Snooping is enabled on the device.
To define DHCP Snooping on VLANs:
— Disables verifying that the source MAC address of the
— Disables backing up to the allotted IP address in the
allows network managers to enable
5
177