What is DHCP Snooping?

DHCP snooping is a security feature implemented on network switches to prevent malicious or unauthorized DHCP servers from providing IP addresses to clients. It works by inspecting DHCP traffic and filtering out unauthorized DHCP server messages. It builds and maintains a DHCP snooping binding table (or database) which contains information about legitimate DHCP leases on the network. This table is then used to validate subsequent DHCP requests and responses, preventing attacks such as DHCP starvation and rogue DHCP servers.