Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can block/filter the DCHP traffic from one port in a managed switch?

We are using RackSwitch G8052 switches. And I want to block both, client (DHCPDISCOVER,DHCPREQUEST) and server (DHCPOFFER,DHCPACK) traffic.

I read that multicast flow can be controlled with IGMP Snooping configuration, but it requires too much configuration and changes in a already setted fabric.

I looking something like:

   interface 0/42
      ip dhcp filter
share|improve this question

Page 402 of the manual for the RackSwitch G8052 describes DHCP Snooping, which filters DHCP traffic.

The basic premise is that you flag ports that are allowed to send packets as a DHCP server (DHCPOFFER, DHCPACK), and by default all other ports are only allowed to send client packets (DHCPDISCOVER, DHCPREQUEST).

It appears the syntax is identical to that of Cisco IOS switches, so if you find a tutorial online on how to do it on a Catalyst switch, it will apply to you, too.

The basics are:

  1. Turn on ip dhcp snooping
  2. Turn on ip dhcp snooping vlan xx for every xx vlan that you want to control DHCP on
  3. Turn on ip dhcp snooping trust on any interface that has a DHCP server connected to it, including uplink ports to other switches if that uplink port is how the clients on this switch get DHCP service.
share|improve this answer
Nice. I did not know this. – ewwhite Sep 24 '12 at 13:01
But this configuration did not limit dhcp client packets (DHCPDISCOVER, DHCPREQUEST) in a port, did it? – Zhen Sep 24 '12 at 13:44
No, it does not. Sorry, I didn't realize that's what you wanted to do. – longneck Sep 24 '12 at 15:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.