DHCP snooping on ports with dynamically assigned VLAN

[Jon_P]

Hi,

To configure DHCP snooping in EXOS we have to configure it per port and per VLAN ie:

enable ip-security dhcp-snooping vlan Example1 ports all
enable ip-security dhcp-snooping vlan Example2 ports all

But when we move a port from one VLAN to another, DHCP snooping is not enabled until the command to enable it on that port in the new VLAN is issued.

When ports are having their VLAN dynamically assigned via policy, how can we get DHCP snooping enabled?

[NKev]

Hi,

are there any other ways to do this without the upm script as described here? -> https://extreme-networks.my.site.com/ExtrArticleDetail?an=000075129

We get so many upm log messages due to the upm script. Is there a way to disable the upm logs?

Best regards,
Kevin

[Jon_P]

Thanks for the reply.

In this case the VLANs exist on the switches and are just being applied to ports dynamically.

[CThompsonEXOS]

This is not pretty but may suffice in your situation:

https://extremeportal.force.com/ExtrArticleDetail?an=000075129

[CThompsonEXOS]

Are they vlans being created dynamically or just being applied dynamically?

If the vlans are being created dynamically the below will work:

https://extremeportal.force.com/ExtrArticleDetail?an=000094059

Thanks,

Chris Thompson