Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?

how to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?

hello,everybody!

i got a problem ,

the company i am working in has 5 vlans which have been set an lay-3 switch(3560),

uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X)

well , that works ok~

now , i got my problem:

i need to force the client only can get ip by dhcp-relay server,

that means if anyone set static IP manunally ,

he can't really access to anywhere (to provent anyone set static IP with malignancy )

i know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )

the how to configure on a cisco 3560 ?

thank all , help me~

1 REPLY
Purple

how to configure cisco 3560 to force the client only can get ip

Hi,

I don't know if there is such a feature on Cisco switches but you can prevent people from changing their IP with

the DHCP snooping / IP source guard features.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/swdhcp82.html

Now if you're in a Windows domain environment you can also use a GPO to prevent  people from changing their IP config

Regards.

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
1365
Views
0
Helpful
1
Replies