Configuring Trusted and Un-trusted Ports
Usually the port connected to server is configured as trusted port and the ports connected to client is configured as un-trusted port.
In this example, xe2 is connected to the DHCP client and xe1 is connected to the DHCP server.
- Configure xe2 connected to DHCP client as un-trusted port.
- Configure xe1 connected to the DHCP server as trusted port.
#configure terminal |
Enter Configure mode. |
(config)#interface xe1 |
Specify the interface to be configured |
(config-if)#ip dhcp snooping trust |
Enable the port as trusted. |
(config)#commit |
Commit Candidate config to running-config |
(config)#interface xe2 |
Specify the interface to be configured |
(config-if)#no ip dhcp snooping trust |
Disable the port as trusted. |
(config-if)#exit |
Exit interface mode |
(config)#commit |
Commit Candidate config to running-config |