It's been a long battle, but we moved again our server to another cloud service, protecting ourselves from (sadly) Chinese IP Addresses, which would bring down AlcatelUnleashed. Hopefully, this is now under control. Feel free to contact us through the CONTACT US link at the bottom of this page if you have any question. Happy browsing!

DHCP Snooping Setup

Post Reply
mumer2
Member
Posts: 8
Joined: 11 Feb 2025 00:26

DHCP Snooping Setup

Post by mumer2 »

Dear Team.
I am stuck in DHCP snooping scenario. As i use to enable DHCP-Snooping on the switches, the PABX stops to give ip addresses to the IP phones.
PABX is connected with Server farm switch with VLAN 20 for voice. I enabled VLAN base DHCP-snooping on this switch and trusted the port on which the PABX is connected (1/1/10). Configuration on server switch for DHCP-Snooping as per below:

vlan 20 members port 1/1/10 untagged
dhcp-snooping vlan 20 admin-state enable
dhcp-snooping binding admin-state disable
dhcp-snooping linkagg 1 trust

Core Switch Configuration:
dhcp-snooping vlan 20 admin-state enable
dhcp-snooping binding admin-state disable
dhcp-snooping linkagg 1 trust \\connected to server switch


Distribution Switch Configuration
dhcp-snooping vlan 20 admin-state enable
dhcp-snooping binding admin-state disable
dhcp-snooping linkagg 1 trust \\connected to Core switch switch

Access Switch Configuration
dhcp-snooping vlan 20 admin-state enable
dhcp-snooping binding admin-state disable
dhcp-snooping linkagg 1 trust \\connected to Distribution switch switch

Guide me where i did mistake in the configuration or how can i more secure the LAN network with L2 DCHP-Snooping configuration.

PABX (1/1/20) --- Server Switch (0/1) --- Core Switch (0/1) Distribution Switch --- (0/1) Access switch (1/1/1 -10) Ip Phones

I had attached the diagram for your further reference so it would be easy for you guys to give me a suitable solution.
User avatar
Cristek
Member
Posts: 97
Joined: 08 Mar 2024 10:56

Re: DHCP Snooping Setup

Post by Cristek »

Hi!
Your diagram is missing, but from the information you posted, it looks like you are missing dhcp-snooping port 1/1/10 trust on the server switch :)
mumer2
Member
Posts: 8
Joined: 11 Feb 2025 00:26

Re: DHCP Snooping Setup

Post by mumer2 »

Hi,
Sorry for that.
I had configured port trust on Server Farm switch. but still facing the issue.

Is the configuration fine that i had done.
Do i need to configure DAI also along with DHCP-Snooping.
User avatar
Cristek
Member
Posts: 97
Joined: 08 Mar 2024 10:56

Re: DHCP Snooping Setup

Post by Cristek »

Then try re-enabling the binding table on all switches. I never disable it when I implement dhcp-snooping (it's on by default I believe).
Post Reply

Return to “OmniSwitch 6560 / 6570M”