DHCP Snooping

The Dynamic Host Configuration Protocol (DHCP) snooping function ensures that DHCP clients can obtain IP addresses from authorized DHCP servers.

Context

The DHCP snooping function ensures that DHCP clients obtain IP addresses from authorized DHCP servers and records mappings between IP addresses and MAC addresses of DHCP clients, preventing DHCP attacks on the network.

Global Parameter Configuration
Before setting DHCP snooping parameters, you must enable the DHCP snooping function globally.
Interface Status Configuration
Before setting DHCP snooping parameters on an interface, you must enable the DHCP snooping function on the interface.
Interface Trust Configuration
After DHCP snooping is enabled, set the interface connected to the authorized DHCP server as trusted interface.
Interface Parameter Settings
On a network with DHCP configured, attackers can take many methods to attack a network. You can configure DHCP snooping to prevent DHCP attacks.
Binding Table Information
DHCP snooping tables include dynamic and static binding tables. Dynamic binding entries are generated through DHCP packets, and static binding entries are manually configured.

Parent topic: Security