OcNOS-SP : Troubleshooting Guide : Security
Security
This chapter contains steps to resolve security issues.
DHCP Snooping
 
Symptom/Cause
Solution
DHCP packets not received
 
DHCP snooping not enabled on bridge.
DHCP snooping for that vlan not enabled on bridge
Use this command:
show ip dhcp snooping bridge BRIDGEID
Make sure DHCP snooping is enabled on the bridge
DHCP snooping entries not visible
 
The interface which the ip address assigned might be a trust port
Use this command:
show ip dhcp snooping bridge BRIDGEID
Make sure the interface connected to host should be untrusted.
If it is showing trust for that interface, untrust the interface to see the entry in the table.
DHCP Snooping IP Source Guard
 
Symptom/Cause
Solution
Not able to enable ip source guard on interface
Use this command:
 
show ip dhcp snooping bridge BRIDGEID
Make sure DHCP snooping is enabled on the bridge
Unable to execute the ip source guard mode merge command
Use the above command to make sure ipsg is enabled on that interface and then only merge will be accepted.
How to see the policies used as part of IP source guard on interface
Use this command:
 
show ip verify source interface IFNAME
 
Shows the entries learned as part this interface and the same is pushed as policies.