LevelOne FGL-2870 - Manual (Page 201)

General Security Measures
3-147
3
Web – Click DHCP Snooping, Information Option Configuration.
Figure 3-86 DHCP Snooping Information Option Configuration
CLI – This example enables DHCP Snooping Information Option, and sets the policy
as replace
.
Configuring Ports for DHCP Snooping
Use the DHCP Snooping Port Configuration page to configure switch ports as
trusted or untrusted.
Command Usage
• A trusted interface is an interface that is configured to receive only messages from
within the network. An untrusted interface is an interface that is configured to
receive messages from outside the network or fire wall.
• When DHCP snooping is enabled both globally and on a VLAN, DHCP packet
filtering will be performed on any untrusted ports within the VLAN.
• When an untrusted port is changed to a trusted port, all the dynamic DHCP
snooping bindings associated with this port are removed.
• Set all ports connected to DHCP servers within the local network or fire wall to
trusted state. Set all other ports outside the local network or fire wall to untrusted
state.
Console(config)#ip dhcp snooping information option 4-183
Console(config)#ip dhcp snooping information policy replace 4-184
Console(config)#exit
Console#show ip dhcp snooping
4-185
Global DHCP Snooping status: disable
DHCP Snooping Information Option Status: disable
DHCP Snooping Information Policy: replace
DHCP Snooping is configured on the following VLANs:
Verify Source Mac-Address: enable
Interface Trusted
---------- ----------
Eth 1/1 No
Eth 1/2 No
Eth 1/3 No
.
.
.