Configuring Dhcp Snooping - D-Link xStack DXS-3250E Web/Installation Manual

DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide

Configuring DHCP Snooping

DHCP Snooping expands network security by providing firewall security between untrusted interfaces and DHCP
servers. By enabling DHCP Snooping network administrators can differentiate between trusted interfaces con-
nected to end-users or DHCP Servers and untrusted interfaces located beyond the network firewall.
DHCP Snooping filters untrusted messages. DHCP Snooping creates and maintains a DHCP Snooping Table
which contains information received from untrusted packets. Interfaces are untrusted if the packet is received from
an interface outside the network or from an interface beyond the network firewall. Trusted interfaces receive pack-
ets only from within the network or the network firewall.
The DHCP Snooping Table contains the untrusted interfaces' MAC address, IP address, Lease Time, VLAN ID,
and interface information.
The DHCP section contains the following topics:
•
Defining DHCP Snooping Properties
•
Defining DHCP Snooping on VLANs
•
Defining Trusted Interfaces
•
Adding Interfaces to the DHCP Snooping Database
Page 102