Mixed information on DHCP snooping
I got the configuration down fine, however I get mixed info from different sources. Some say the client's broadcast will go to everyone, but only the trusted port reply will be forwarded. Some say the client broadcasts only make it to the valid DHCP server. From my LAB in Virl it seems the former is true. I'm worried because this is a virtual switch and I don't have my real hardware handy atm. Reading over Cisco docs it says
"• The switch receives a packet (such as a DHCPOFFER, DHCPACK, DHCPNAK, or DHCPLEASEQUERY packet) from a DHCP server outside the network or firewall"
This leads me to believe that the DISCOVER packet makes it to the rouge server but the reply OFFER is dropped at the switch. In my VIRL testing this does not happen.
Posted Apr 15, 2016, 1:14 AM UTC