CCNA: Port Security & DHCP Snooping
Someone plugged a personal hub into a desk port, and a rogue DHCP server appeared last week. Lock the access ports down.
Tasks
- On Gi0/1 and Gi0/2 enable port security: access mode, maximum 1 MAC, sticky learning, violation shutdown.
- Enable DHCP snooping globally and for VLAN 1.
- Trust the uplink to the real DHCP server (Gi0/24).
- Get PC1 an address with ip dhcp, then check show port-security interface g0/1 shows the sticky MAC.