Access ports face users; Gi0/1 is the uplink to the real DHCP server. Secure VLAN 10: turn on DHCP snooping globally, enable it on VLAN 10, enable DAI for VLAN 10, and mark Gi0/1 as trusted for both.

SW1

Objectives

○DHCP snooping enabled globally
○DHCP snooping on VLAN 10
○Gi0/1 trusted for DHCP snooping
○Dynamic ARP Inspection on VLAN 10
○Gi0/1 trusted for ARP inspection

Hint

Full sequence

enable
configure terminal
 ip dhcp snooping
 ip dhcp snooping vlan 10
 ip arp inspection vlan 10
 interface gi0/1
  ip dhcp snooping trust
  ip arp inspection trust
  end

← Previous task

Write a standard numbered ACL

Security Fundamentals · ~6 min

Next task →

DHCP snooping + Dynamic ARP Inspection

Security Fundamentals · ~6 min