Sunday, October 17, 2021

Enabling ip source guard on Access-Point port

Hi,

Recently I configured DHCP snooping and IP source guard on access switches. Every switch connect to some APs. Each AP have static IP from vlan 10(mgmt vlan) but clients will receive dynamic IP from DHCP in other vlans(20,21).

This is my configuration on switch:

ip dhcp snooping

ip dhcp snooping vlan 20,21

no ip dhcp snooping information option

int po1

ip dhcp snooping trust

I want to enable IP source guard on AP ports.

My question is: Now that I use static addresses from vlan 10 on APs, should I have enabled DHCP snooping on vlan 10?



No comments:

Post a Comment