Security Internetworking Experts


Post New Topic  Post A Reply
my profile | register | search | faq | forum home
  next oldest topic   next newest topic
» Security Internetworking Experts   » Security   » CCIE Security Lab Forum   » ip dhcp snooping and arp inspection

UBBFriend: Email this page to someone!    
Author Topic: ip dhcp snooping and arp inspection
dogfartbig
Guru

Member # 30698

Rate Member
posted November 16, 2011 10:20 AM      Profile for dogfartbig     Send New Private Message      Edit/Delete Post  Reply With Quote 
I am little confused.....

If we have mix environment and for example must provide static arp inspection for non dhcp environment for particular VLAN and also have dhcp server that must be protected by dhcp snooping....

Do we enable just ip dhcp snooping and configure ip dhcp snooping trust to dhcp server...or we also must enable ip dhcp snooping for that particular VLAN?........

I think not...because we have static arp filter for that VLAN.....

Any comments?

REGARDS

Posts: 234 | From: Bosnia and Herzegovina | Registered: Mar 2011  |  IP: Logged
Kingsley Charles (CCSP, CCNP, CCIP)
Brainiac

Member # 29872

Member Rated:
posted November 17, 2011 04:32 AM      Profile for Kingsley Charles (CCSP, CCNP, CCIP)     Send New Private Message      Edit/Delete Post  Reply With Quote 
Configure static arp inspection for non-dhcp environment and dhcp snooping based for dhcp server environment.

If I remember correctly, ip dhcp snooping trust is required else the DHCP request will never be sent to the DHCP server.

With regards
Kings

Posts: 887 | From: India | Registered: Jun 2010  |  IP: Logged
dogfartbig
Guru

Member # 30698

Rate Member
posted November 17, 2011 12:10 PM      Profile for dogfartbig     Send New Private Message      Edit/Delete Post  Reply With Quote 
THANKS!

REGARDS

Posts: 234 | From: Bosnia and Herzegovina | Registered: Mar 2011  |  IP: Logged


All times are Eastern Time  
Post New Topic  Post A Reply Close Topic    Move Topic    Delete Topic next oldest topic   next newest topic
Printer-friendly view of this topic
Hop To:


Contact Us | Security Internetworking Experts