Which two statements are true when Dynamic Host Configuration Protocol (DHCP) Snooping is enabled?

Dynamic Host Configuration Protocol (DHCP) Snooping is a security feature that acts as a firewall between untrusted hosts and trusted DHCP servers. It helps prevent malicious or malformed DHCP traffic by monitoring DHCP messages and filtering untrusted sources.

When configuring DHCP Snooping on RUCKUS ICX switches, consider the following:

Global Enablement: DHCP Snooping must be enabled globally on the switch to activate the feature across the device. This is done using the following command in global configuration mode:

ip dhcp snooping

Trusted Interfaces: Interfaces connected to legitimate DHCP servers should be configured as trusted to allow DHCP server messages to pass through. This is configured per interface:

interface ethernet 1/1/1

ip dhcp snooping trust

Replace 1/1/1 with the appropriate interface identifier.

VLAN Configuration: DHCP Snooping must be enabled on specific VLANs where DHCP services are required. This ensures that DHCP messages are monitored within those VLANs: