Category: Networking

DHCP snooping in Edge-Core switches

Configuration was performed on already installed equipment, via telnet. For Edge-Coge (tested on ES-3510 and ES-3528) , but I think the rest of the Edge-Core level L2 will also work.

Suppose that on the switch we have only one native VLAN (vlan 1), and it contains all the ports. In ES-3510 you need to make a trusted port 10 (combined with SFP) to which the packets come from our DHCP server.

Configure:

Vty-0#configure // enter configuration mode
Vty-0 (config)#interface ethernet 1/10 // choose which port to configure
Vty-0 (config-if)#ip dhcp snooping trust // make port trusted
Vty-0 (config-if)#exit // exit to previous menu

Enable dhcp snooping:

Vty-0 (config)# ip dhcp snooping vlan 1 // on VLAN
Vty-0 (config) # ip dhcp snooping // on switch

To view the statistics on the DHCP snooping operation, use the command:

Vty-0#show ip dhcp snooping binding