CCDE Written Exam - Cisco Exam 352-001: DHCP Snooping and Option 82

DHCP Snooping: Option 82 Information Added to DHCP Request

Question

As part of the security protocol for your network design, you have designated that option 82 is enabled for DHCP snooping.

When option 82 is enabled, which information will be added to the DHCP request?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

As per http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080b9c12c.shtml information is remote ID and Circuit ID (origional answer is wrong)

Option 82 is an additional DHCP (Dynamic Host Configuration Protocol) header that can be enabled on network devices to provide an additional layer of security. It is commonly used in environments where DHCP servers are not directly connected to the same subnet as the client devices, such as in a distributed network.

When option 82 is enabled, the DHCP snooping switch adds additional information to the DHCP request packet. This information includes the switch MAC address and VLAN, module, and port, which is known as the "circuit ID" or "port ID".

This information can be used to ensure that DHCP requests are only processed from authorized ports and to prevent rogue DHCP servers from assigning IP addresses to devices on the network.

Option 82 also includes a "remote ID" field, which can be used to identify the network device or location where the DHCP request originated. This can be helpful in larger networks where there may be multiple DHCP servers, or in environments where DHCP requests are forwarded through multiple switches.

Therefore, the correct answer to this question is B: remote ID and circuit ID.