PLANET WGSW-52040 - Manual (Page 303)

Setting DHCP Snooping on the switch will effectively detect and block this kind of network
attack.
Configuration sequence is:
switch#
switch#config
switch(config)#ip dhcp snooping enable
switch(config)#interface ethernet 1/11
switch(Config-Ethernet1/11)#ip dhcp snooping trust
switch(Config-Ethernet1/11)#exit
switch(config)#interface ethernet 1/12
switch(Config-Ethernet1/12)#ip dhcp snooping trust
switch(Config-Ethernet1/12)#exit
switch(config)#interface ethernet 1/1-10
switch(Config-Port-Range)#ip dhcp snooping action shutdown
switch(Config-Port-Range)#
36.4 DHCP Snooping Troubleshooting Help
36.4.1 Monitor and Debug Information
The “debug ip dhcp snooping” command can be used to monitor the debug information.
36.4.2 DHCP Snooping Troubleshooting Help
If there is any problem happens when using DHCP Snooping function, please check if the
problem is caused by the following reasons:
 Check that whether the global DHCP Snooping is enabled;
 If the port does not react to invalid DHCP Server packets, please check that whether
the port is set as a non-trusted port of DHCP Snooping.
36-82