1 dhcp snooping configuration, 2 dhcp snooping vlan configuration – PLANET SGSD-1022 User Manual

Page 326

Advertising
background image

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P


-

If a DHCP packet is from server is received on a trusted port, it will be forwarded to both trusted and untrusted ports in

the same VLAN.

• If the DHCP snooping is globally disabled, all dynamic bindings are removed from the binding table.

• Additional considerations when the switch itself is a DHCP client – The port(s) through which the switch submits a client

request to the DHCP server must be configured as trusted. Note that the switch will not add a dynamic entry for itself to the

binding table when it receives an ACK message from a DHCP server. Also, when the switch sends out DHCP client packets

for itself, no filtering takes place. However, when the switch receives any messages from a DHCP server, any packets

received from untrusted ports are dropped.

4.11.15.1 DHCP Snooping Configuration

Use the DHCP Snooping Configuration page to enable DHCP Snooping globally on the Managed Switch, or to configure MAC

Address Verification.

Figure 4-11-45 DHCP Snooping Configuration page screenshot

The page includes the following fields:

Object

Description

DHCP Snooping Status Enables DHCP snooping globally. (Default: Disabled)

DHCP Snooping

MAC-Address

Verification

Enables or disables MAC address verification. DHCP packets will be dropped if

the source MAC address in the Ethernet header of the packet is not same as the

client’s hardware address in the DHCP packet.

4.11.15.2 DHCP Snooping VLAN Configuration

Enables DHCP snooping on the specified VLAN.

Command Usage

326

Advertising
This manual is related to the following products: