185/215
5.8.3 What Could Go Wrong?
1 If the DHCP clients in the publicly accessible ports are using IP
Addresses provided by the Rogue-DHCP:
a. Make sure that all ports connected to publicly accessible
ports are an untrusted port in Advance Application > IP
Source Guard > IPv4 Source Guard Setup > DHCP
Snooping > Configure > Port.
b. Verify the PVID of the port to this DHCP client. Make sure
that DHCP snooping is enabled for that VLAN in Advance
Application > IP Source Guard > IPv4 Source Guard Setup
> DHCP Snooping > Configure > VLAN.
2 If the DHCP clients in the publicly accessible ports are not
able to receive IP Addresses provided by the real DHCP
server:
a. Make sure that the port to the real DHCP is a trust port in
Advance Application > IP Source Guard > IPv4 Source
Guard Setup > DHCP Snooping > Configure > Port.
b. Make sure that both redundant ports are trusted ports in
Advance Application > IP Source Guard > IPv4 Source
Guard Setup > DHCP Snooping > Configure > Port when
using a ring topology.