DHCP snooping S3300 switches

[tantony]

I'm thinking about enabling DHCP snooping on my Netgear switches.  This is my first time, and I have a few questions to make sure I'm not doing anything wrong.  I have 4 VLANs in my network.

1. I have a total of 15 Netgear switches, and some UniFi.  Do I enable DHCP snooping on all of them or only on the core switches?
2. I have a Voice VLAN also, do I add it to the DHCP snooping?
3. Do you recommend I enable DHCP snooping to make my network more safe?  I understand DHCP snooping is done to prevent rogue dhcp servers.
4. Any recommendations?

https://www.downloads.netgear.com/files/GDC/S3300/S3300_SWA_EN.pdf

[schumaku · Accepted solution]

By rule of thumb:

• Enable DHCP Snooping on all switches
• Define the uplink interfaces for the DHCP snooping
• Define the DHCP server MAC on each VLAN to establish the trust

[tantony]

One more question.  Lets say I have VLANS 2,4.  What if I enable DHCP snooping for those VLANs, but the rouge DHCP server is also on VLAN 2 or 4?

Watched this YouTube video, seems straight forward.  Although not on a Netgear switch, but it shouldn't matter right?

https://www.youtube.com/watch?v=2eNsoS9Ri6w&ab_channel=NorthwoodsPS 

[schumaku · Accepted solution]

By rule of thumb:

• Enable DHCP Snooping on all switches
• Define the uplink interfaces for the DHCP snooping
• Define the DHCP server MAC on each VLAN to establish the trust