I'm seeing the following error
Nov 4 09:33:29.390:%DHCP_SNOOPING-5-DHCP_SNOOPING_MATCH_MAC_FAIL: DHCP_SNOOPING drop message because the chaddr doesn't match source mac, message type: DHCPINFORM, chaddr: 000e.9bac.xxxx, MAC sa: 001a.6bd4.xxxx
Cisco explaination on this error is:
The DHCP snooping feature attempted MAC address validation and the check failed. There may be a malicious host trying to carry out a denial of service attack on the DHCP server. The packet will be dropped.
I have noticed that this message is appearing for several ports on my switch where pcs are connected. I didn't see anything other than DHCP request coming out from these hosts but not sure why the validation would. Can someone point me to direction what I should be done to fix this?