CCNA: Port Security & DHCP Snooping

Someone plugged a personal hub into a desk port, and a rogue DHCP server appeared last week. Lock the access ports down.

Tasks

  1. On Gi0/1 and Gi0/2 enable port security: access mode, maximum 1 MAC, sticky learning, violation shutdown.
  2. Enable DHCP snooping globally and for VLAN 1.
  3. Trust the uplink to the real DHCP server (Gi0/24).
  4. Get PC1 an address with ip dhcp, then check show port-security interface g0/1 shows the sticky MAC.