Friday, October 30, 2015

Protect your network from rogue DHCP servers with Cisco switches

This will protect your network from rogue DHCP servers.

ip dhcp snooping
#Globally enables it

ip dhcp snooping vlan (whatever vlan's your want to protect)

interface gi1/1/1
#This would be the interface that your DHCP server is on, can also be a trunk if it's upstream

ip dhcp snooping trust
#Allow DHCP from whatever interface this is on



Show ip dhcp snooping
#This will show you a summary of what you've setup


I'll add some screenshots for this config later.

No comments:

Post a Comment