Static IP dhcp snooping settings

In the process of setting DHCP, we should pay attention to some special points. Just like the static IP dhcp snooping and IP Source Guard we will explain below. Because IP Source Guard cannot be used together with dynamic DHCP, you need to set static effects.

 
 

  
  
Clock timezone WST 8
  
  
Switch 1 provision ws-c3750g-48ts
  
  
System mtu routing 1500
  
  
Ip subnet-zero
  
  
!
  
  
Ip dhcp snooping vlan 1 (specify the vlan protected by DHCP snooping)
  
  
Ip dhcp snooping information option allow-untrusted
  
  
Ip dhcp snooping database flash: snooping specifies the database path)
  
  
Ip dhcp snooping database write-delay 15
  
  
Ip dhcp snooping (start DHCP snooping)
  
  
!
  
  
!
  
  
!
  
  
Interface GigabitEthernet1/0/45 enable the port of IP Source Guard)
  
  
Switchport mode access
  
  
Switchport port-security
  
  
Switchport port-security violation restrict
  
  
Spanning-tree portfast
  
  
Ip verify source port-security
  
  
(Ip verify source port-security is used together with the startup IP soure binding
  
  
Ip source binding 000A. E439.5F55 vlan 1 192.168.1.200 interface Gi1/0/45,
  
  
It indicates that ip source binding and dynamic DHCP cannot be used at the same time, so we need to set static ip dhcp snooping ))
  
  
!
  
  
!
  
  
Interface Vlan1
  
  
Ip address 192.168.1.1 255.255.255.0
  
  
!
  
  
Ip classless
  
  
Ip http server
  
  
Ip http secure-server
  
  
!
  
  
!
  
  
Ip source binding 000A. E439.5F55 vlan 1 192.168.1.200 interface Gi1/0/45
  
  
!
  
  
Control-plane
  
  
!
  
  
!
 
 

Note: Use the following command to view the working status:

 
 

  
  
Switch#sh ip ver source               
  
  
Switch#sh ip dhcp binding   
  
  
Switch#sh ip dhcp snooping binding 
 
 

The above are the specific settings of static IP dhcp snooping and IP Source Guard.