Cisco CCNP BCMSN 642-812 Certification Examination Tutorial – DHCP Snooping

An significant section of passing the Cisco CCNP BCMSN test and shielding your community from thieves is to acknowledge that even day-to-day protocols and expert services can get the job done from us the moment that intruder is in our network.

It may possibly be difficult to think, but a little something as innocent as DHCP can really direct to difficulties for your community. When a host sends out a DHCPDiscovery packet, it listens for DHCPOffer packets – and accepts the first Supply it gets!

Section of that DHCPOffer is the address to which the host ought to set its default gateway. What if a DHCP server that does not belong on our community – a rogue DHCP server – is placed on that subnet?
If that host makes use of the DHCPOffer from the rogue server, the host could conclude up using the rogue server as its default gateway or DNS server!

We can avoid this with DHCP Snooping. DHCP Snooping classifies interfaces as possibly reliable or untrusted.

DHCP messages obtained on reliable interfaces will be permitted to go through the switch, but DHCP messages acquired on untrusted interface final result in the interface by itself currently being positioned into err-disabled condition.

By default, the change considers all ports untrusted – which implies we greater keep in mind to configure the switch to rely on some ports when we permit DHCP Snooping!

Very first, we need to have to empower DHCP Snooping on the total change:

SW1(config)#ip dhcp snooping

To allow DHCP Snooping for a particular VLAN, use the ip dhcp snooping command.

SW1(config)#ip dhcp snooping vlan 4

Ports can then be configured as reliable with the ip dhcp snooping have faith in command.

SW1(config-if)#ip dhcp snooping belief

There are other selections readily available with DHCP Snooping, and we’ll seem at some of people in a long run tutorial. DHCP Snooping is an essential subject matter for your CCNP BCMSN exam, and it’s just as essential in actual-globe networks – so get familiar with it for both equally the exam room and the community home!