Back
Lesson 1 of 5

DHCP Snooping Configuration

Lab Objectives

  • Enable DHCP Snooping globally and for the VLAN carrying client hosts.
  • Configure switch ports as trusted or untrusted so only the legitimate DHCP server (R1) can send DHCP replies.
  • Verify clients obtain addresses from the DHCP server and validate snooping state.

Lab Tasks (Try It Yourself First!)

Complete these tasks WITHOUT looking at the solution below. Use ? and show commands to figure it out.

Task 1: Enable DHCP Snooping

Enable DHCP snooping globally on the switch and restrict snooping to VLAN 100 (the VLAN where PC-1 and PC-2 reside). Also disable inserting DHCP Option 82 information by the switch.

Task 2: Configure Trusted Ports

Configure the switch interface connected to the DHCP server (R1) as a trusted DHCP snooping port. Also mark the interface toward R3 (the device acting as a DHCP relay agent) as trusted.

Task 3: Force Client Renew

On PC-1 and PC-2, release the current DHCP lease and renew it so they request DHCP addresses again. Confirm they receive addresses from the DHCP server.

Think About It: If an attacker connects a rogue DHCP server on an untrusted port, what types of problems can arise in a production network? How does DHCP Snooping mitigate those?

Lab Solution

Topology (logical, exact interface names shown). R1 is the only DHCP Server in this lab.

                R1 (DHCP Server)
                E0/0 192.1.14.1
                    |
                 SW-100
             E0/0  |  E0/3
                PC-1 PC-2 (VLAN100 clients)

Notes:

  • Switch SW-100 has clients in VLAN 100.
  • R1 (E0/0) is the legitimate DHCP server.
  • R3 (E0/0) acts as DHCP relay; its switch-facing port must be trusted.

Task 1 Solution: Enable DHCP Snooping

What we are doing: We enable DHCP Snooping globally, limit snooping to VLAN 100 (so the switch only tracks DHCP messages for that VLAN), and disable the switch inserting DHCP information option (Option 82). Disabling Option 82 is required in this environment because the DHCP server (R1) does not support Option 82; if the switch inserts Option 82 and the server rejects it, clients will fail to get addresses.

SW-100(config)# ip dhcp snooping
SW-100(config)# ip dhcp snooping vlan 100
SW-100(config)# no ip dhcp snooping information option

What each command does and why it matters:

  • ip dhcp snooping — Enables DHCP Snooping globally on the switch. This activates the feature that inspects DHCP packets and builds a binding table (MAC ↔ IP ↔ VLAN ↔ port). Real-world: this prevents rogue DHCP servers from assigning addresses to clients.
  • ip dhcp snooping vlan 100 — Limits snooping to VLAN 100 so the switch only performs DHCP inspection for that VLAN. This reduces processing and matches the scope of protected clients.
  • no ip dhcp snooping information option — Stops the switch from adding DHCP Option 82 (relay agent information) into DHCP requests. We disable this because R1 does not support Option 82; if left on, DHCP replies might be rejected.

Verify:

SW-100# show ip dhcp snooping

Expected output (representative — includes critical lines you should see):

Switch# show ip dhcp snooping
DHCP snooping is enabled
DHCP snooping is configured on following VLANs:
    100
DHCP snooping is operational
Option 82 insertion is disabled


<div class="topology-diagram">
<img src="data:image/svg+xml;base64,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" alt="Network Topology Diagram" style="max-width:100%;height:auto;background:#fff;padding:16px;border:1px solid #e5e7eb;border-radius:8px;" />
</div>

cisco
SW-100(config)# interface E0/0
SW-100(config-if)# ip dhcp snooping trust
!
SW-100(config)# interface E0/3
SW-100(config-if)# ip dhcp snooping trust

What each command does and why it matters:

  • interface E0/0 followed by ip dhcp snooping trust — Marks the interface toward R1 as trusted so DHCP server responses are allowed. This is essential; otherwise legitimate server replies would be dropped.
  • interface E0/3 followed by ip dhcp snooping trust — Marks the interface toward R3 (DHCP relay) as trusted. A relay forwards server replies and requests; the switch must trust the relay.

Verify:

SW-100# show ip dhcp snooping trust

Expected output (representative):

Switch# show ip dhcp snooping trust
Trunk    VLAN  Ports
-------------------------
 100     E0/0
 100     E0/3


<div class="topology-diagram">
<img src="data:image/svg+xml;base64,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" alt="Network Topology Diagram" style="max-width:100%;height:auto;background:#fff;padding:16px;border:1px solid #e5e7eb;border-radius:8px;" />
</div>

text
C:\> ipconfig /release
C:\> ipconfig /renew

What this does and why it matters:

  • ipconfig /release — Tells the client to give up its existing IP lease and send a DHCPRELEASE (or simply clear the current lease locally).
  • ipconfig /renew — Causes the client to send a DHCPDISCOVER to obtain a new lease. This triggers DHCP packet flow through the switch so you can verify snooping behavior.

Verify client address and snooping binding: On PC-1 after renew:

C:\> ipconfig

Ethernet adapter Local Area Connection:

   IPv4 Address. . . . . . . . . . . : 192.168.1.10
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1

On the switch, check the snooping binding to see the DHCP mapping:

SW-100# show ip dhcp snooping binding

Expected output (representative):

Switch# show ip dhcp snooping binding
MacAddress          IpAddress       Lease(sec)  Type       VLAN  Interface
------------------------------------------------------------------------
0011.2233.4455      192.168.1.10    8594        dhcp-snooping 100  FastEthernet0/1
0066.7788.99aa      192.168.1.11    8610        dhcp-snooping 100  FastEthernet0/2


<div class="topology-diagram">
<img src="data:image/svg+xml;base64,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" alt="Network Topology Diagram" style="max-width:100%;height:auto;background:#fff;padding:16px;border:1px solid #e5e7eb;border-radius:8px;" />
</div>

cisco
SW-100# show ip dhcp snooping
  1. Verify the uplink to the DHCP server is trusted:
SW-100# show ip dhcp snooping trust
  1. If the uplink is not trusted, enable it:
SW-100(config)# interface E0/0
SW-100(config-if)# ip dhcp snooping trust
  1. If Option 82 was enabled and the server does not support it, disable it:
SW-100(config)# no ip dhcp snooping information option

Explanation: If the server-side interface is untrusted, the switch will drop DHCP server responses. If the switch inserts Option 82 and the server rejects it, the lease will fail.

Verification Checklist

  • DHCP snooping enabled globally on the switch.
  • DHCP snooping configured for VLAN 100.
  • no ip dhcp snooping information option set because R1 does not support Option 82.
  • E0/0 and E0/3 on SW-100 configured as trusted.
  • Clients obtain addresses and appear in the snooping binding table.

Common Mistakes

SymptomCauseFix
Clients do not receive DHCP IPsUplink to DHCP server is not trusted; switch drops server repliesConfigure ip dhcp snooping trust on the interface toward the DHCP server
DHCP leases fail after switch Option 82 addedDHCP server does not support Option 82Configure no ip dhcp snooping information option
No entries in snooping binding tableDHCP snooping not enabled for the client VLANRun ip dhcp snooping vlan <vlan-id> and ensure snooping is enabled globally

Challenge Task

Protect the network further by enabling DHCP Snooping across two VLANs (VLAN 10 and VLAN 20) with different uplinks to legitimate DHCP servers. Configure the correct trusted ports and verify that bindings are maintained separately per VLAN. (No step-by-step — identify the VLANs, trusted uplinks, and commands needed.)

Final note: DHCP Snooping is a low-effort, high-impact feature for preventing rogue DHCP servers. In production networks it is commonly combined with dynamic ARP inspection and IP Source Guard to form a layered defense against L2-based spoofing and man-in-the-middle attacks.

Practice with Hands-On Labs

30 step-by-step labs for CCNA, CCNP Enterprise & Security