Cisco CATALYST 2960 User Manual

20-8
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
Chapter 20 Configuring DHCP and IP Source Guard Features
Configuring DHCP Snooping
Default DHCP Snooping Configuration
Table 20-1 shows the default DHCP snooping configuration.
DHCP Snooping Configuration Guidelines
• You must globally enable DHCP snooping on the switch.
• DHCP snooping is not active until DHCP snooping is enabled on a VLAN.
• Before globally enabling DHCP snooping on the switch, make sure that the devices acting as the
DHCP server and the DHCP relay agent are configured and enabled.
• Before configuring the DHCP snooping information option on your switch, be sure to configure the
device that is acting as the DHCP server. For example, you must specify the IP addresses that the
DHCP server can assign or exclude, or you must configure DHCP options for these devices.
• When configuring a large number of circuit IDs on a switch, consider the impact of lengthy character
strings on the NVRAM or the flash memory. If the circuit-ID configurations, combined with other
data, exceed the capacity of the NVRAM or the flash memory, an error message appears.
• Before configuring the DHCP relay agent on your switch, make sure to configure the device that is
acting as the DHCP server. For example, you must specify the IP addresses that the DHCP server
can assign or exclude, configure DHCP options for devices, or set up the DHCP database agent.
• If the DHCP relay agent is enabled but DHCP snooping is disabled, the DHCP option-82 data
insertion feature is not supported.
Table 20-1 Default DHCP Snooping Configuration
Feature Default Setting
DHCP server Enabled in Cisco IOS software, requires configuration
1
1. The switch responds to DHCP requests only if it is configured as a DHCP server.
DHCP relay agent Enabled
2
2. The switch relays DHCP packets only if the IP address of the DHCP server is configured on the SVI of the DHCP client.
DHCP packet forwarding address None configured
Checking the relay agent information Enabled (invalid messages are dropped)
2
DHCP relay agent forwarding policy Replace the existing relay agent information
2
DHCP snooping enabled globally Disabled
DHCP snooping information option Enabled
DHCP snooping option to accept packets on
untrusted input interfaces
3
3. Use this feature when the switch is an aggregation switch that receives packets with option-82 information from an edge switch.
Disabled
DHCP snooping limit rate None configured
DHCP snooping trust Untrusted
DHCP snooping VLAN Disabled
DHCP snooping MAC address verification Enabled
DHCP snooping binding database agent Enabled in Cisco IOS software, requires configuration. This feature is
operational only when a destination is configured.

Cisco CATALYST 2960 Specifications

General

Manageable	Yes
Stacking	No
Model	Catalyst 2960 Series Switches
Power over Ethernet (PoE)	Available on some models (IEEE 802.3af)
VLANs	255 active VLANs
Features	QoS
Operating Temperature	32 to 113°F (0 to 45°C)
Relative Humidity	10% to 85% non-condensing
Power Consumption	Varies by model (30W to 400W)