About Dhcp Snooping - Cisco Catalyst 4500 Series Configuration Manual

Configuring DHCP Snooping, IP Source Guard,
and IPSG for Static Hosts
This chapter describes how to configure Dynamic Host Configuration Protocol (DHCP) snooping, IP
source guard, and IP source guard (IPSG) for static hosts on Catalyst 4500 series switches. It provides
guidelines, procedures, and configuration examples.
This chapter consists of the following major sections:
•
•
•
•
•
•
•
For complete syntax and usage information for the switch commands used in this chapter, first look at
Note
the Cisco Catalyst 4500 Series Switch Command Reference and related publications at this location:
http://www.cisco.com/en/US/products/hw/switches/ps4324/index.html
If the command is not found in the Catalyst 4500 Series Switch Command Reference, it will be found in
the larger Cisco IOS library. Refer to the Cisco IOS Command Reference and related publications at this
location:
http://www.cisco.com/en/US/products/ps6350/index.html

About DHCP Snooping

DHCP snooping is a DHCP security feature that provides security by filtering untrusted DHCP messages
and by building and maintaining a DHCP snooping binding table. An untrusted message is a message
that is received from outside the network or firewall and that can cause traffic attacks within your
network.
OL-25340-01
About DHCP Snooping, page 50-1
Configuring DHCP Snooping, page 50-6
Displaying DHCP Snooping Information, page 50-18
Displaying IP Source Binding Information, page 50-23
Configuring IP Source Guard, page 50-20
Displaying IP Source Binding Information, page 50-23
Configuring IP Source Guard for Static Hosts, page 50-24
C H A P T E R
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
50
50-1