Configure DHCP Snooping on VLANs

Use the following procedure to configure DHCP Snooping on a specific VLAN. If DHCP Snooping is globally disabled, the switch forwards DHCP reply packets (received on trusted or untrusted ports) to all ports.

If you enable DHCP Snooping globally, the agent determines whether to forward DHCP reply packets based on the DHCP Snooping mode of the VLAN and trusted state of the port.

Note

Note

You cannot enable DHCP Snooping on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

  1. In the navigation pane, expand Configuration > IP.
  2. Click DHCP Snooping.
  3. Click the DHCP Snooping-VLAN tab.
  4. In the row for the VLAN, double-click the DhcpSnoopingEnabled field, and select true to enable DHCP Snooping.
  5. Click Apply.

DHCP Snooping-VLAN Field Descriptions

Use the data in the following table to use the DHCP Snooping-VLAN tab.

Name

Description

VlanId

Specifies the VLAN ID.

DhcpSnoopingEnabled

Specifies if DHCP Snooping is enabled or disabled for the particular VLAN. By default, DHCP Snooping is disabled.
9036830-00 Rev AD