Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Protecting from DHCP Pool exhaustion

We are looking to allow the iPad/iPhone devices on the network.  From reading previous reports in the media, I know that several colleges/universities have run into a problem with some code versions not handling DHCP correctly.

I am looking at trying to protect us from a DHCP Pool exhaustion situation.  We have implement some of the port security commands.  On the trunk ports that the AP's are connected to, I have used ip arp inspection trust  as a default.  Maybe we need to look at changing that stance.  Putting this command on all trunk ports, whether connected to an AP or a switch, is what we do as a part of our normal deployment.

Suggestions ?

1 REPLY
New Member

Re: Protecting from DHCP Pool exhaustion

Are you also utilizing the dhcp snooping feature?  In a college environment we had to implement this on our campus switches.

http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/SecInteg.html#wp1005858

Regards,

-Rick

311
Views
0
Helpful
1
Replies