ArubaCX switches and dhcpv4 snooping - a switch behind a switch - dhcp packets could be dropped

in a scenario where for example port 48 is the uplink port in direction dhcp server and on port 49 there is another switch connected it may occure that the dhcp requests from clients behind port 49 are being dropped because of the default dhcpv4 snooping policy which says: "Option 82 Configurations: Untrusted Policy : drop".
If you run command "show dhcpv4-snooping" you see the status of the policy

solution 1: make interface 1/1/49 also trusted
-----------------------------------------------------------------------
interface 1/1/49
description uplink_other_switch
no shutdown
vlan trunk native 10
vlan trunk allowed 10
dhcpv4-snooping trust
exit


solution 2: probably the better solution
--------------------------------------------------------
>> set option 82 policy to keep using the following command:
dhcpv4-snooping option 82 untrusted-policy keep

##links##
- https://arubanetworking.hpe.com/techdocs/AOS-CX/10.07/HTML/5200-7861/Content/Chp_DHCP_snoop/Dv4Snoop_cmds/dhc-sno-opt-82-630-640-840-10.htm

computer2know :: thank you for your visit :: have a nice day :: © 2025