Intellinet 561099 - DHCP Snooping

  8‐PortGigabitWeb‐SmartSwitch
35|Page

7.3 DHCPSnooping  
TheaddressesassignedtoDHCPclientsonunsecureportscanbecarefullycontrolledusingthedynamic
bindingsregisteredwithDHCPSnooping.DHCPSnoopingallowstheIntellinetswitchtoprotectanetwork
fromrogueDHCPserversorotherdeviceswhichsendport‐relatedinformationtoaDHCPserver.This
informationcanbeusefulintrackinganIPaddressbacktoaphysicalport.



CommandUsage
 NetworktrafficmaybedisruptedwhenmaliciousDHCPmessagesarereceivedfromanoutside
source.DHCPSnoopingisusedtofilterDHCPmessagesreceivedonanon‐secureinterfacefrom
outsidethenetworkorfirewall.
 WhenDHCPSnoopingisenabled,DHCPmessagesenteringanuntrustedinterfacearefilteredbased
upondynamicentrieslearnedviaDHCPsnooping.



ActivatingDHCPSnoopingontheIntellinet8‐PortGigabitWeb‐SmartSwitchissimple:SetDHCPSnooping
to‘Enable’,specifytheporttowhichtheDHCPserver(i.e.,therouter)isconnectedto,andthenclick
‘Apply’toactivatethesettings.



