Community discussions

 
User avatar
Maggiore81
Member Candidate
Member Candidate
Topic Author
Posts: 221
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

DHCP Snooping not working

Fri Nov 08, 2019 4:11 pm

Hello
I have this situation:

MAIN ROUTER: RB HEX G3 with 6.44.6
eth1: WAN 1.1.1.1/24
eth2: TOWER 100.64.100.254/24 (here is the DHCP SERVER)


the eth2 is connected to a CRS112-8P-4S on the port eth8.
On it, from the port eth1 to eth7 are Wireless AP.
On the CRS there is a bridge, with all the ports on it.

I have enabled on the CRS the DHCP SNOOPING feature, and set to "trusted" the eth8, that is facing the router of my tower, wich is also doing DHCP SERVER.

I have customers that sometimes connects their router on the LAN PORT, so creating a rogue dhcp server.
The function dhcp snooping doesnt seem to work since the dhcp offers are not dropped.

how can I verify the situation?
I also tried the port-isolation but without success since the wiki is quite unclear to me.
Dott. Elia Spadoni
---
Network Administrator,
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
Zacharias
Forum Veteran
Forum Veteran
Posts: 732
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: DHCP Snooping not working

Fri Nov 08, 2019 4:36 pm

Only CRS3xy support hardware DHCP snooping... am not really sure what happens with other models...
 
User avatar
Maggiore81
Member Candidate
Member Candidate
Topic Author
Posts: 221
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: DHCP Snooping not working

Fri Nov 08, 2019 4:39 pm

no problem even it is in software, for me it is important that works!

any help on the port isolation?
Dott. Elia Spadoni
---
Network Administrator,
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
Zacharias
Forum Veteran
Forum Veteran
Posts: 732
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: DHCP Snooping not working

Fri Nov 08, 2019 4:51 pm

for me it is important that works!
any help on the port isolation?
Am confused.. you said it does not work on your first post!
 
User avatar
Maggiore81
Member Candidate
Member Candidate
Topic Author
Posts: 221
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: DHCP Snooping not working

Fri Nov 08, 2019 5:00 pm

Sorry.
For me it doesnt work dhcp snooping.
Also I tried port isolation but the wiki for me is confusing, so I didnt try further.
Dott. Elia Spadoni
---
Network Administrator,
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com

Who is online

Users browsing this forum: No registered users and 106 guests