hi there,
we have the configuration such as follow :
internet— rb4011 ---- crs326-24G-2S+ ---- APs ----- clients
no vlans, but there is dhcp-snooping config active on crs-326-24G-2s+
recently we receive the following message on crs:
07:08:05 interface,warning ether15: received DHCP server message on untrusted port
07:08:05 interface,warning ether15: received DHCP server message on untrusted port
07:17:27 interface,warning ether15: received DHCP server message on untrusted port
07:17:27 interface,warning ether15: received DHCP server message on untrusted port
07:26:50 interface,warning ether15: received DHCP server message on untrusted port
07:26:50 interface,warning ether15: received DHCP server message on untrusted port
07:36:12 interface,warning ether15: received DHCP server message on untrusted port
07:36:12 interface,warning ether15: received DHCP server message on untrusted port
07:45:34 interface,warning ether15: received DHCP server message on untrusted port
07:45:34 interface,warning ether15: received DHCP server message on untrusted port
07:53:15 interface,warning ether11: received DHCP server message on untrusted port
07:53:15 interface,warning ether11: received DHCP server message on untrusted port
07:54:56 interface,warning ether15: received DHCP server message on untrusted port
07:54:56 interface,warning ether15: received DHCP server message on untrusted port
08:02:37 interface,warning ether11: received DHCP server message on untrusted port
what we need is the detail of the suspected of the mention rouge dhcp. i already add interface, dhcp, debug on /system logging but no details received.
is there any idea how to get the detail info ? such as mac and or ip addres of the source rouge dhcp ?
thank you