DHCP snooping on Cisco Catalyst 2950


I’ll explain the few commands used to enable DHCP snooping on our Catalyst switch at work. The users aren’t really tech savvy or anything, but it is painless to configure so it is worth having it enabled.


First, we need to know which VLAN the DHCP server belongs to, “show arp” has that info :

switch1#show arp Protocol Address Age (min) Hardware Addr Type Interface Internet 1 0004.75XXXXXX ARPA Vlan1

Then we enable configuration mode :

switch1#conf term

Enabling DHCP snooping on VLAN 1 :

switch1(config)#ip dhcp snooping switch1(config)#ip dhcp snooping vlan 1 switch1(config)#ip dhcp snooping information option

The DHCP server is connected to the second port, we will add that interface to the trusted list :

switch1(config)#interface fastEthernet 0/2 switch1(config-if)#ip dhcp snooping trust

Let’s review the config :

switch1#show ip dhcp snooping Switch DHCP snooping is enabled DHCP snooping is configured on following VLANs: 1 Insertion of option 82 is enabled Interface Trusted Rate limit (pps)

FastEthernet0/2 yes unlimited

DHCP snooping is enabled on VLAN 1 for interface 2 !

Saving the config :

switch1#copy running-config startup-config

Thanks for reading this post!

Did you find an issue in this article?

- click on the following Github link
- log into Github with your account
- click on the line number containing the error
- click on the "..." button
- choose "Reference in new issue"
- add a title and your comment
- click "Submit new issue"

Your feedback is much appreciated! πŸ€œπŸΌπŸ€›πŸΌ

You can also drop me a line below!