Switch Recommendation to prevent "rogue" DHCP?

May 11, 2005 2 Replies

In my switch closets I have 2948-XL switches. Recently we've had a rash of people plugging devices into the network that act as DHCP servers. Naturally this causes all sorts of conflicts and has to be tracked down and stopped each time it occurs.



I've been unable to find a solution to this problem using my 2948-XL switches (i.e. a way to only allow dhcp responses from our actual dhcp server)... so it looks like its time for replacements. Can anyone recommend a switch that supports this feature (cisco calls it DHCP snooping I think),



48 ports+ 10/100 ports and VLAN capability (port + trunking). Bonus points if its not too pricey (obviously cost is a real issue or I wouldn't still be using 2948s).

Many thanks in advance!


-Steve


Hi,

On Catalyst 2950 switches you should be able to setup IP Access-lists that filter DHCP messages on ports connected to desktops. The 2950 series is what replaced the 2900xl series switches. I'm not sure though if you need the enhanced feature set in order to configure these ip access-lists.

Erik

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required