On 5/18/19 4:44 AM, Radu-Adrian Feurdean wrote:
That one seems to be the simpler form, depending only on an external DHCP
server. It may be enough for some set-ups. Subscriber functionality provides
more options, such as enforcing auth and internal dhcp server that takes data
to be returned from RADIUS. It also allows dissociation between L2 and L3 (same
subnet on several VLANs).
You can almost call it SDN:)
It's perfect for lots of smaller networks that have L2 DHCP snooping and
access enforcement via that means. My L2 happens to offer just that. I
do have to enforce a somewhat "traditional" L2-L3 mapping, but it works
fine on this network, at least.
--
Brandon Martin
