Cisco SG550XG-24T - Page 361

IP Configuration
IPv4 Management and Interfaces
271 Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
15
The following describes how DHCP reply packets are handled when both DHCP Snooping
and DHCP Relay are enabled
DHCP Snooping Binding Database
DHCP Snooping builds a database (known as the DHCP Snooping Binding database) derived
from information taken from DHCP packets entering the device through trusted ports.
The DHCP Snooping Binding database contains the following data: input port, input VLAN,
MAC address of the client and IP address of the client if it exists.
The DHCP Snooping Binding database is also used by IP Source Guard and Dynamic ARP
Inspection features to determine legitimate packet sources.
DHCP Relay
VLAN with IP Address
DHCP Relay
VLAN without IP Address
Packet arrives
without Option
82
Packet arrives
with Option 82
Packet arrives
without Option
82
Packet arrives with
Option 82
Option 82
Insertion
Disabled
Packet is sent
without Option
82
Packet is sent
with the
original Option
82
Relay discards
Option 82
Bridge -
Packet is sent
without Option
82
Relay
1. If reply originates
on the device, packet is
sent without Option 82
2. If reply does not
originate on the
device, discards the
packet
Bridge – Packet is sent
with the original
Option 82
Option 82
Insertion
Enabled
Packet is sent
without Option
82
Packet is sent
without Option
82
Relay –
discards
Option 82
Bridge –
Packet is sent
without Option
82
Packet is sent without
Option 82