Re: DHCP Snooping not working

Dear Sadiq

I think I tried setting the access ports as trusted option, but it did not
help.

For the software upgrade, I was planning on the following releases:
12.2(44)SE6 or 12.2(50)SE3

Which one do you recommend?

Regards

Farrukh

On Mon, Jan 18, 2010 at 2:41 PM, Farrukh Haroon <farrukhharoon_at_gmail.com>wrote:

> My mistake. I should have given more details.
>
> Users are connected to 6 3560 access-layer switches. Even tough they are
> L3-capable switches, they are running in L2 mode. The switches uplink to a
> 6500 Series Core Switch.
>
> There is an FWSM Module on the core switch which acts as the DHCP relay
> agent for all the user requests. The DHCP servers (Microsoft) are in a
> dedicated servers VLAN connected to the core switch.
>
> Regards
>
> Farrukh
>
>
> On Mon, Jan 18, 2010 at 2:26 PM, Sadiq Yakasai <sadiqtanko_at_gmail.com>wrote:
>
>> Hi Farrukh,
>>
>> What if you trust the access ports? Does that change the outcome? What
>> about moving on to a newer code?
>>
>> Is the debug above from the access switch? Whats your topology here
>> please?
>>
>> Sadiq
>>
>> On Mon, Jan 18, 2010 at 11:22 AM, Farrukh Haroon <farrukhharoon_at_gmail.com
>> > wrote:
>>
>>> Dear All
>>>
>>> We are facing a weird issue while trying to configure DHCP snooping.
>>> Users are unable to get/renew IP Addresses after enabling DHCP snooping.
>>> The DHCP Snooping binding table is always empty.
>>>
>>> The configuration is pretty simple
>>>
>>> ip dhcp snooping vlan 101,104
>>> no ip dhcp snooping information option
>>> ip dhcp snooping
>>>
>>> All ports connected to DHCP servers and uplinks set as trusted.
>>>
>>> Switch Version: c3560-ipservices-mz.122-35.SE5
>>>
>>> I tried the same configuration with another 3560 Switch running an older
>>> version with no issues at all.
>>>
>>> This is the error we see on all the trusted ports, any ideas why this is
>>> happenning:
>>>
>>> Dec 27 08:56:43 KSA: DHCPSNOOP(hlfm_set_if_input): Setting if_input to
>>> Gi0/49 fo
>>> r pak. Was not set
>>> Dec 27 08:56:43 KSA: DHCPSNOOP(hlfm_set_if_input): *Clearing if_input for
>>> pak. W
>>> as Gi0/49*
>>> Dec 27 08:56:43 KSA: DHCPSNOOP(hlfm_set_if_input):* Setting if_input to
>>> Gi0/49 fo
>>> r pak. Was not set*
>>>
>>> Regards
>>>
>>> Farrukh
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> CCIE #19963

Blogs and organic groups at http://www.ccie.net
Received on Mon Jan 18 2010 - 15:02:10 ART