Configure DHCP Snooping on VLANs

Use the following procedure to configure DHCP Snooping on a specific VLAN. If DHCP Snooping is globally disabled, the switch forwards DHCP reply packets (received on trusted or untrusted ports) to all ports.

If you enable DHCP Snooping globally, the agent determines whether to forward DHCP reply packets based on the DHCP Snooping mode of the VLAN and trusted state of the port.

Note

You cannot enable DHCP Snooping on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

In the navigation pane, expand Configuration > IP.
Click DHCP Snooping.
Click the DHCP Snooping-VLAN tab.
In the row for the VLAN, double-click the DhcpSnoopingEnabled field, and select true to enable DHCP Snooping.
Click Apply.

DHCP Snooping-VLAN Field Descriptions

Use the data in the following table to use the DHCP Snooping-VLAN tab.


Name	Description
VlanId	Specifies the VLAN ID.
DhcpSnoopingEnabled	Specifies if DHCP Snooping is enabled or disabled for the particular VLAN. By default, DHCP Snooping is disabled.
Origin	Specifies the origin of DHCP Snooping configuration on the VLAN. The supported values are: config - Set by the user. radius - Set by the Remote Authentication Dail-In User Service (RADIUS) attribute.