ansible-collections / dellemc.os6

GNU General Public License v3.0
8 stars 13 forks source link

ip dhcp snooping #61

Open s0ne opened 1 year ago

s0ne commented 1 year ago
SUMMARY

To protect the network from unwanted DHCP servers we use the DHCP snooping feature in os6. I'm not sure if you should include this function in existing roles or if you should create a separate role for it. Ultimately, a global setting must be set on the switch to enable DHCP snooping. Then set the desired inferfaces from which DHCP replies are allowed to trust.

ISSUE TYPE
ADDITIONAL INFORMATION

Manually, the path would look like this, on the Switch directly:

ip dhcp snooping
ip dhcp snooping vlan 1-500

And on the interface:

ip dhcp snooping trust