Chapter 12
| Security Measures
DHCP Snooping
– 303 –
inserts the relay agent’s address (when DHCP snooping is enabled), and
forwards the packets to trusted ports. (This is the default policy.)
Web Interface
To configure global settings for DHCP Snooping:
1.
Click Security, DHCP Snooping.
2.
Select Configure Global from the Step list.
3.
Select the required options for the general DHCP snooping process and for the
DHCP snooping information option.
4.
Click Apply
Figure 191: Configuring Global Settings for DHCP Snooping
DHCP Snooping
VLAN Configuration
Use the Security > DHCP Snooping (Configure VLAN) page to enable or disable
DHCP snooping on specific VLANs.
Command Usage
◆
When DHCP snooping is enabled globally on the switch, and enabled on the
specified VLAN, DHCP packet filtering will be performed on any untrusted ports
within the VLAN.
◆
When the DHCP snooping is globally disabled, DHCP snooping can still be
configured for specific VLANs, but the changes will not take effect until DHCP
snooping is globally re-enabled.
◆
When DHCP snooping is globally enabled, and DHCP snooping is then disabled
on a VLAN, all dynamic bindings learned for this VLAN are removed from the
binding table.
To Next Page