Hi, > Two gotchas: > * 'ip dhcp snooping database flash:dhcp-snoop.db', so that if the > switch reboots all the clients do not get locked out
but thats really for the ARP stuff (DAI) for if the switch reloads and doesnt SEE any DHCP request to build up IP/MAC mappings then it wont trust a client.....ne that didnt realise it has to ask for a new address...... for plain DHCP snooping you dont need to worry about the DHCP database......as all it does is stop clients from handing addresses out - only trusted ports can be sending DHCP answers.. alan _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
