I guess I was thinking about it a bit. If the goal is to force users to use
custom dns server settings making sure they get a dhcp lease with dhcp
snooping/source guard still can't accomplish this because the user can
always just reset to static ip with the dhcp address handed out and there
own dns servers. I suppose the only way to truly force this is with an acl
blocking all dns servers but the ones approved.
Dane
On Sun, Aug 23, 2009 at 6:13 AM, S Malik <ccie.09_at_gmail.com> wrote:
> I think, as Kumar said, it should be source guard which works with dhcp
> snooping.
>
> On Sat, Aug 22, 2009 at 2:15 PM, R.B. Kumar <seekumarin_at_gmail.com> wrote:
>
>> Hi,
>>
>> It is possible using DHCP Snooping with SOURCE-GUARD
>>
>> HTH
>>
>> regards,
>>
>> RBK
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Sun Aug 23 2009 - 06:35:38 ART
This archive was generated by hypermail 2.2.0 : Tue Sep 01 2009 - 05:43:57 ART