DHCP Snooping Trust Boundary

Bundle lab · $29.99

Harden the Layer-2 access edge by enabling DHCP Snooping on a single access switch and placing the trust boundary only toward the legitimate DHCP server/gateway. Validate with show commands and end-host connectivity.

Track

CCNA

Est. time

30 minutes

Difficulty

Beginner

Topics

CCNA, Switching, Layer 2 Security, DHCP Snooping, Access Edge

Learning objectives

Explain the purpose of DHCP Snooping and the trust boundary on an access switch
Enable DHCP Snooping globally and for a specific VLAN
Trust only the uplink interface toward the legitimate DHCP server
Verify DHCP Snooping operational status and bindings

Troubleshooting focus

DHCP Snooping enabled globally but not for the correct VLAN
Trust configured on the wrong interface (host-facing port) causing a security gap
Uplink not trusted, dropping legitimate DHCP replies from the server
Using the wrong VLAN number for snooping leading to no bindings

Topology

Own this lab's topology — and every lab — in Layer 2 Security Hardening.

Unlock with Layer 2 Security Hardening

What's included in the package

Work / baseline CML import — lab-work.yaml
Topology diagram — topology.svg
Print-ready topology diagram (PDF) — topology.pdf
Step-by-step learner guide (Markdown — for Obsidian/VS Code) — lab-guide.md
Branded PDF lab guide — open in any viewer (Adobe/Preview) — lab-guide.pdf
Getting-started README — README.md
Verification checklist — verification-checklist.md

Download access

New here? See how the download → build in CML → grade loop works.

This lab is part of the Layer 2 Security Hardening bundle — own every lab in it permanently for a one-time $29.99.

Own the Layer 2 Security Hardening bundle — $29.99 Sign in Back to archive Today's lab

Create a free account, then own the Layer 2 Security Hardening bundle for a one-time $29.99 — buy once, keep every lab forever.

Found a problem with this lab?

Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.

Grade your work

Create a free account to submit your completed lab for grading.

Create a free account

DHCP Snooping Trust Boundary

Learning objectives

Troubleshooting focus

Topology

Related labs

Study this topic

Grade your work