Netgear M4100-D12G (GSM5212v1h1) - 10‐port GE + 2 GE Combo L2 Managed PD Switch 管理者ガイド

Configure the port through which the DHCP server is reached as trusted. 

(Netgear Switch) (Config)# interface 1/0/1

(Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust

 

View the DHCP Snooping Binding table.

(GSM7328S) #show ip dhcp snooping binding

Total number of bindings:  1

         MAC Address       IP Address     VLAN 

 

Interface    Type    

 

Lease (Secs)

      -----------------  ---------------  ----  -----------  -------  -----------

      00:16:76:A7:88:CC    192.168.10.86    1

 

  1/0/2  

 

     DYNAMIC 

 

86400

 

Enable ARP inspection in VLAN 1.

(Netgear Switch) (Config)# ip arp inspection vlan 1

 

Now all ARP packets received on ports that are members of the VLAN are copied to the 
CPU for ARP inspection. If there are trusted ports, you can configure them as trusted in 
the next step. ARP packets received on trusted ports are not copied to the CPU. 

Configure port 1/0/1 as trusted.

(Netgear Switch) (Config)# interface 1/0/1

(Netgear Switch) (Interface 1/0/1)# ip arp inspection trust

 

Now ARP packets from the DHCP client go through because there is a DHCP snooping 
entry; however ARP packets from the static client are dropped. It can be overcome by static 
configuration as described in 

246.

Enable DHCP snooping globally.

a. Select Security > Control > DHCP Snooping Global Configuration.