Table of Contents
Advertisement
DHCP Snooping Configuration
The chapter explains usage of the DHCP Snooping function and how to configure it.
Overview
DHCP Snooping is the DHCP security feature. The functions are:
To record relationship between the IP address and MAC address of the DHCP client. For
security reasons, the Network Administrator may need to record the IP address for a user
accessing the network to affirm the relationship between the IP address that user obtains from
the DHCP server and MAC address of the user's host.
DHCP Snooping records MAC address of DHCP client-end and the obtained IP address by
listening the DHCP-REQUEST and DHCP-ACK broadcast packets received by a trustport. The
Administrator can view the information about IP addresses obtained from the DHCP client via
command show dhcp-snooping database.
Client obtains IP addresses from legal servers: If a DHCP server is set up privately on the
network, users may obtain false IP addresses. To make users obtain IP addresses from legal
DHCP servers, the DHCP Snooping Security Mechanism allows users to configure a port as
trust ports and an untrust ports:
239 SIGNAMAX LLC • www.signamax.eu
Advertisement
Table of Contents
