DHCP Snooping

RaphaelL
Building a reputation

DHCP Snooping

Hi ,

 

After all these years , is there any implementation of DHCP snooping yet ? I don't see any way to enable it , but access ports in trusted/untrusted state and so on.

 

I just did a test yesterday and I was able to snoop on DHCP requests made by another client.

 

 

Thanks ,

3 REPLIES 3
Bruce
Kind of a big deal

Re: DHCP Snooping

Depend, what do you want to use DHCP Snooping for?

 

If you want to use it for security in conjunction with Dynamic ARP Inspection (DAI), then it’s there, https://documentation.meraki.com/MS/Other_Topics/Dynamic_ARP_Inspection. Beyond that there really isn’t much you can do with DHCP Snooping on the Meraki switches (other than block a rogue DHCP server).

 

ww
Kind of a big deal
Kind of a big deal

Re: DHCP Snooping

GIdenJoe
Kind of a big deal

Re: DHCP Snooping

It does support DHCP snooping but the implementation is different.

It does not use a switchport to define where the offer/ack messages can come from but rather the MAC address of the originating server.

 

And it also has DAI which also relies on the snooping database.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels