86
Table 5 Handling strategies
If a DHCP request
has…
Handling
strategy
DHCP snooping…
Option 82
Drop Drops the message.
Keep Forwards the message without changing Option 82.
Replace
Forwards the message after replacing the original Option 82 with
the Option 82 padded according to the configured padding format,
padding content, and code type.
No Option 82 N/A
Forwards the message after adding the Option 82 padded
according to the configured padding format, padding content, and
code type.
Restrictions and guidelines: DHCP snooping
configuration
• The DHCP snooping configuration does not take effect on a Layer 2 Ethernet interface that is
an aggregation member port. The configuration takes effect when the interface leaves the
aggregation group.
• Specify the ports connected to authorized DHCP servers as trusted ports to make sure that
DHCP clients can obtain valid IP addresses. The trusted ports and the ports connected to
DHCP clients must be in the same VLAN.
• You can specify the following interfaces as trusted ports: Layer 2 Ethernet interfaces and Layer
2 aggregate interfaces. For more information about aggregate interfaces, see Layer 2—LAN
Switching Configuration Guide.
DHCP snooping tasks at a glance
To configure DHCP snooping, perform the following tasks:
1. Configuring basic DHCP snooping features
2. (Optional.) Configuring DHCP snooping support for Option 82
3. (Optional.) Configuring DHCP snooping entry auto backup
4. (Optional.) Setting the maximum number of DHCP snooping entries
5. (Optional.) Configuring DHCP packet rate limit
6. (Optional.) Configuring DHCP snooping security features
7. (Optional.) Enabling DHCP snooping logging
8. (Optional.) Disabling DHCP snooping on an interface
Configuring basic DHCP snooping features
Configuring basic DHCP snooping features in a common
network
About basic DHCP snooping features in a common network
Basic DHCP snooping features refer to the following features: