Enabling DHCP Snooping for profiling without blocking DHCP requests

BTinNC · ‎04-27-2016

I am reading through a lot of documentation trying to increase my knowledge on how ISE Profiling works.

I have found many design guides that say to enable these commands:

ip dhcp snooping

ip dhcp snooping vlan [VLAN ID's]

I understand the basic concept of what DHCP snooping does, but if I enable it and enable it on a VLAN, what is preventing the switch from dropping the DHCP packets because I havent configured any of the dhcp trust interfaces?

nspasov · ‎04-30-2016

Hi Brian-

If you want to use DHCP Snooping then you must define the trusted ports. Otherwise, as you have already mentioned, your clients will not get addresses from DHCP.

With that being said, what are your concerns with enabling trust interfaces?

Thank you for rating helpful posts!