Free CCNA | DHCP Snooping | Day 50 | CCNA 200-301 Complete Course

Free CCNA 200-301 flashcards/Packet Tracer labs for the course: jitl.jp/ccna-files
📖 My CCNA Book: www.manning.com/books/acing-t...
📚Boson ExSim: jitl.jp/ccna-exsim ← the BEST practice exams for CCNA
💻Boson NetSim: jitl.jp/ccna-netsim ← 100+ detailed guided labs for CCNA
💯ExSim + NetSim: jitl.jp/ccna-kit ← get BOTH for a discount!
🥇CCNA Gold Bootcamp: www.flackbox.com/cisco-ccna-c... ← the course I used to get my CCNA (top rated course on the Internet)
Get the course ad-free with bonus quizzes and more on JITL Academy: courses.jeremysitlab.com
In Day 50 of this free CCNA 200-301 complete course, you will learn about DHCP snooping.
In this FREE and COMPLETE CCNA 200-301 course you will find lecture videos covering all topics in Cisco official exam topics list, end-of-video quizzes to test your knowledge, flashcards to review, and practice labs to get hands-on experience.
SUPPORT MY CHANNEL
The best way to support my channel is to like, comment, subscribe, and share my videos to help spread the word!
If you can spare to leave a tip, here are some options:
PayPal: paypal.me/jeremysitlabYT
BAT (Basic Attention Token) tips in the Brave browser (www.jeremysitlab.com/brave-br...)
======================
Patreon: / jeremysitlab
======================
Cryptocurrency Addresses
Bitcoin: bc1qxjpza7nx46e8a2rtz6vkcrvxx9mfjnufdrk0jv
Ethereum: 0x08B4325b1B99B05d850A3bfCd4A6620D770cfB64
======================
0:00 Introduction
0:51 Things we'll cover
1:18 DHCP Snooping intro
4:40 DHCP Starvation attack
6:20 DHCP Poisoning attack
9:20 DHCP messages
10:45 DHCP Snooping operations
12:46 DHCP Snooping configuration
14:55 DHCP Snooping rate-limiting
17:27 DHCP Option 82 (Information Option)
20:28 Command review
20:38 Things we covered
21:45 Quiz 1
22:26 Quiz 2
22:51 Quiz 3
23:26 Quiz 4
24:10 Quiz 5
24:51 Boson ExSim
#cisco #CCNA

[@lja1993]

If you're reading this, you've made it to day 50. You might be feeling burnt out, but you're so close so don't give up!!!

[@ferxan]

thanks, that's what I needed

[@abbysinthe]

@@ferxan same 🤣

[@dmitrikazantsev3692]

I see it more clear as we are coming to the end of the course, that it is easier to produce those materials then learn them. When you publish it you just need to document what you already know, so you just go on and on. And when you learn it you need to use more and more of your ARP table memory, which is close to be full any minute now. :)

[@ferdiemiraflor]

Thanks man, I have been doubting myself lately too.

[@lja1993]

@@ferdiemiraflor Keep it up :) I've booked my exam for 2 weeks from now 😳 Shitting myself slightly but excited to see what happens

[@kensrensen100]

7:35 A common attack is to combine DHCP starvation with DHCP poisoning. First, the attacker will send spoofed DHCP discover messages until the pool is completely drained. They will then pose as a DHCP server. This way they can guarantee that the clients will receive addressing from them.

[@lemueldichosa5915]

passed my CCNA today. Thank you so much Jeremy for your free course!! It really helps me a lot understanding CCNA in depth. Hands down the best for me.

[@Ad000121]

Great work What other resources did you use

[@HK-sw3vi]

lets gooooo

[@Lestergreen77]

Did you have a lab

[@VeryBigBang13]

HQE : High Quality Education !

[@sudipsen6376]

From Day 1 to Day 50. Its a long journey . I hope soon I will cover the rest of the playlist.

[@Psouffle]

Have you taken the exam?

[@sudipsen6376]

@@Psouffle yes.. I passed

[@Psouffle]

Congrats bro, I just finished studying for DHCP Snooping today@@sudipsen6376. Looking back in hindsight, what advice would you give to the former YOU who made this initial comment at Day 50 6 months ago?

[@matthewgraham790]

Thanks Jeremy for the course. I passed my CCNA exam today thanks to this course. I really appreciate it. The course has been so well put together

[@pedrohartman5973]

Congrats! Did you use the anki flash cards in your prep?

[@matthewgraham790]

@@pedrohartman5973 yes they were very helpful in remembering all the wrote learning parts

[@kimosaid3221]

I'm in day 20 Thank You so much dear Jeremey

[@tg9460]

Thank you Jeremy for all your hard work. You are the GOAT in IT tutoring. God bless you.

[@mohitram7243]

Your content is one of THE BEST on CCNA out there... BIG THANK YOU !! from INDIA for making these videos available to the public via youtube.

[@cesarbrenner5146]

Excellence in the matter those are my words for you. Jeremy , you are a Genius to get so many knowledge of computer network.

[@juanmartinayonacarrera2190]

Hi Jeremy, I learning with your videos. Thank you and God bless you.

[@rachael8017]

It's overwhelming but indeed well structured and understanding,thanks jeremy

[@clays351]

Great Job Jeremy. Your doing awesome. Keep up the hard work and bright perspective in helping others!

[@JeremysITLab]

Thanks Clay :)

[@truthalone_]

Commenting here to let you know I'm benefiting a lot from these videos. Thank you so very much Love from India.

[@enochliu8316]

The DHCPDECLINE message is only used when the server is being declined because the address is already in use, and can only be sent after a DHCPACK. The broadcasted request message being not targeted at your server is the implict offer decline message.

[@enochliu8316]

4.3.3 DHCPDECLINE message If the server receives a DHCPDECLINE message, the client has discovered through some other means that the suggested network address is already in use. The server MUST mark the network address as not available and SHOULD notify the local system administrator of a possible configuration problem.

[@saytono4307]

Thank you so much Jeremy..... for this free CCNA courses.. it really helping me a lot to have a better understanding on each topic/lessons you teach. We really appreciate all the efforts you are putting onto it and keep it on and HOPEFULLY, I will pass my CCNA too. Will update you once I passed it 😁🤞

[@edsonpaz7537]

DHCP snooping had been difficult for me! But now it's all clear!!!! Thank you so much.

[@JeremysITLab]

Thanks Edson, glad to hear that!

[@faizaussi352]

Thank you Jeremy, you're the best.

[@majiddehbi9186]

Hello jeremy i ve been following since one year we are near to close all the lessons thx as always and god bless u for ure time

[@masi-ww9kr]

thank you so much for this great course

[@arongach7241]

It was really helpful, thank you for your work!

[@sandipgangarde2179]

Most awaiting topic. Expecting trouble shooting steps, step by step from windows CMD to switch commands.

[@-b777ljq3]

very good lecture, quiz is very good, very helpful for digesting.

[@pavithraradjassegarane]

it's a Long Time Wait For Your Uploads!!

[@greenworld355]

Thanks a Lot, Sir. Your Course is Awsome.

[@brucenguyen102]

Just Pure Awesomeness

[@imup9otmyname505]

This guy have put so much effort in this series, if i ever get to pass the test it would be thanks to ur videos, im gonna do the test by the end of August, Thank u and don't stop we're about to finish.

[@Valap11]

Did you pass?

[@pissedputin7738]

First time that I had all of the end questions correct!

[@maxwellchessdotcom6952]

Hey Jeremy, can you tell us about one of your worst professional days, where you botched one or more configurations?

[@benjaminazu-crabbe3818]

Thank you Jeremy

[@0wad]

Interesting video!

[@dastaan.]

Thank you so much

[@ankushkoul7912]

Very well explained

[@ahtishamsham9230]

Just Fabulous❤

[@apoorvagopalarao1939]

Hi Jeremy , i love all your videos and totally appreciate your effort in explaining each topic in detail , i have an interview scheduled this Wednesday , can you please help me solve this question. What if the client is assigned wrong ip address by dhcp server ?how to solve this? Thanks in advance

[@adir6375]

thanks Jeremy !

[@amineachat4429]

thanks jeremy

[@lanaadnan6512]

Thank you 🙏

[@danieldurovec3797]

Great Thank You for your content Jeremy. 15:09 - just a little typo in: ,,If the rate of DHCP messages crosses ... , the INTERACE (Interface) ...

[@taika023]

Thank you!

[@JeremysITLab]

Thanks for watching, Yuri :)

[@jameschua9255]

I like your explanation on Option 82. So crystal clear, unlike certain online study. Thank you.

[@rogerward6242]

When I read about ARP Inspection, I just kept wondering..."But can't this all be sidestepped with macchanger??" Then pure poetry at 12:06 - "However it's not perfect because the attacker could just spoof the frame source MAC address too" 😂😂😂

[@kareemschultz]

Is it good practice to trust a AP uplink since it’s trunk port carrying multiple clans for different networks?

[@benkennedy6720]

On day 16, just wondering is there much of the course left for you to upload? Thanks for your time and effort!

[@islembounatiro2999]

PLEASE SOMEONE TELL UUUUUUUUS HOW MUCH IS LEFT

[@user-wc7cx9dh7z]

@@islembounatiro2999 about 40%

[@VelezBiH]

Wow I’m here day 50! How do you guys keep track of previous knowledge. I been slacking with antki last 10 videos. It will probably take me a week just to catch up with anki.

[@wilsoncolina1672]

Hi Sir Jeremy im asking if can we used only 1 switches per network right? or depend upon how many PCs are used in a single company?

[@arjaycajes9558]

Hey jeremy, what is the standard rate limit for DHCP Snooping?

[@555104068]

just an dunb question. will an access switch change mac addresses of passing frames?

[@austinmbuwayesango]

Another channel like this one

[@arsenmkrtchyan4832]

Jeremy can you tell me the relationship between SDN, ACI, IBN, DNA ? I have read their functions and terminology but I cannot grasp the overall picture. If you cam please tell me with few words how they relate to each other.

[@alekodimitrov2635]

Still on day 2, though I wanted to pop in and express my gratitude for the content. Thank you Jeremy!

[@BankiHorvathGyorgy]

Hi Jeremy, exciting stuff! I have just one question to the "rate limiting" as an efficient way to protect against starvation (17:04): When the attacker sends hundreds of DISCOVERs with a delay of 2 seconds between each message... then it can still exhaust the pool in a few minutes, can´t he? What is the default reservation timeout on the dhcp server after an OFFER, when no REQUEST follows?

[@HemanthJabalpuri]

I guess, port security is only a good way for DHCP starvation attack

[@paulroberts8542]

Can you confirm if lease offers - not just successful successfully completed leases - are stored in the bindings table. If not, how can the switch check DECLINE client messages which I assume are made against uncompleted leases. Many thanks.

[@abbysinthe]

If you want to make a port untrusted again (back to default), do you just do "no ip dhcp snooping trust" ?

[@underrated007]

What will happen if we have manually configured the secure mac address and we have enabled secure static mac aging type absolute. It will flush out the secure mac address once the timer expires but cannot learn new mac address. So, will it go into err-disabled state?

[@sharadhr1033]

Hi Jeremy ! I m planning to buy Boson's CCNA EX-Sim to prepare for my exam DO u have any active Promo/Discount code

[@bunny.bunbob]

so whats the purpose of option 82 apart from causing problems? it tags frames during normal procedures such as dhcp messaging from hosts in order to have them dropped by default? what?

[@sunburn8863]

Thanks jeremey what about Ip dhcp relay information trust-all For option 82

[@JeremysITLab]

Yeah there are plenty of commands/options I didn't cover in this video. As is, I think this is more than you need for the CCNA!

[@khujastaafreenmohsini7851]

Hi Jeremy, Quiz 4, why is IP address not a correct option since the dhcp snooping binding table is used for checking both mac and ip address match ?

[@JeremysITLab]

A device sending a DHCP discover message doesn't have an IP address. It's using DHCP to try to get an IP address.

[@syedyousafbukhari2213]

Although I understood the part of of untrusted filtering but what confused me in Quiz 3 was the 1st slide mentioning "DHCP snooping only filters DHCP messages.."

[@GH-NET]

Thank Jeremy, if i have DHCP sever set on SW2 and the link between 2 SWs is port chanel. So how can i determine which port is trusted on SW2 and trusted port on SW1 is configured chanel port or physical ports which are member of port channel?

[@JeremysITLab]

You should configure the port-channel interface as trusted.

[@gerryvalenzuela9158]

10 more to go and we will be ready to exam

[@konalaravichandanreddy9886]

Hii, Jeremy. Does this course also covers compTIA Network plus?

[@JeremysITLab]

Nope, this is a CCNA course!

[@jcee09]

Hi, I have an issue with one of our site running a DHCP Server. We are using only a CISCO Catalyst Switch. Some staff are bringing in, home routers and AP like D-Link, TP-Link, etc. and plugging it in our network to have wireless connection on their mobile phones. When i check ARP and mac address-table, only the connected pc's IP and MAC address is showing, the AP Devices are no where to be find. Also this devices (ap/routers) once connected it will provide a separate DHCP address in their devices (mobile phones). So will DHCP Snooping help to block those AP in connecting in our network? Please need your help.

[@marcobasso1929]

Hi Jeremy, I have a question about the discarding of the client DHCP packets (DISCOVER and REQUEST). You said that by default, the switch interfaces check the mac addresses both in the layer 2 frame and in the layer 3 packet. By checking on internet I found that this check is made only after entering the following command: ip dhcp snooping verify mac-address. So I think that this check is not done by default. What do you think?

[@paulroberts8542]

I think the MAC verification is enabled by default but you can turn it off with #no ip dhcp snooping verify mac-address. Confirm this by running #show ip dhcp snooping from Privileged Mode and you should see the line "Verification of hwaddr field is enabled"

[@tomatordia8448]

Best

[@Somebla]

Thank you so much Jeremy! Does the course you offer on your website for $50 offer the full CCNA course? or is it also in progress?

[@JeremysITLab]

Still in progress! But it's about two months ahead of youtube.

[@josefbarnes6780]

@@JeremysITLab I'm thinking of buying the course from your website. Do you know how much longer until it's finished?

[@bernymartinez1025]

HQE: high quality education

[@edoardobattaglia5157]

15:45 Hi, if 1 is too low what is a value that is normally used for a simple cient? thx for the attention

[@JeremysITLab]

Here's Cisco's recommendation: 'Cisco recommends not configuring the untrusted interface rate limit to more than 100 packets per second. The recommended rate limit for each untrusted client is 15 packets per second. Normally, the rate limit applies to untrusted interfaces. If you want to set up rate limiting for trusted interfaces, keep in mind that trusted interfaces aggregate all DHCP traffic in the switch, and you will need to adjust the rate limit to a higher value. You should fine tune this threshold depending on the network configuration. The CPU should not receive DHCP packets at a sustained rate of more than 1,000 packets per second. ' www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/53SG/configuration/config/dhcp.html#wp1107678

[@satyavir8]

Is it David Bombal, sir?

[@abhinavrawat3223]

Question: with DHCP option 82, if the "no ip dhcp snooping information option" command is used in sw1 and sw1 will now not forward the information, then how come sw2 will be able to add the information of the option 82 to the frame and forward to R1?

[@JeremysITLab]

It adds the same information that SW1 would. There’s no need for a DHCP request to come from a host directly connected to the switch.

[@itsvanshkanwarshow4650]

How many more videos will be there for CCNA

[@sweetsoni107]

1oo

[@erikcarlin9538]

🎯 Key Takeaways for quick navigation: 00:00 *📚 Introduction to DHCP Snooping* - DHCP snooping overview and its importance in network security. - Exam topic coverage of DHCP snooping along with related topics such as port security and dynamic ARP inspection. - Planned structure of the video covering the introduction, working principles, configuration, and examples of DHCP snooping. 01:28 *🎯 Understanding Trusted and Untrusted Ports* - Explanation of trusted and untrusted ports on Cisco switches in the context of DHCP snooping. - Identification of uplink and downlink ports and their configuration as trusted and untrusted respectively. - Importance of distinguishing between ports for network security purposes. 03:23 *🔄 Examples of DHCP Snooping Operation* - Demonstration of DHCP message forwarding and inspection process on both trusted and untrusted ports. - Illustration of scenarios where DHCP snooping inspects or discards DHCP messages based on port trust levels. - Understanding the behavior of switches in different DHCP message reception situations. 04:41 *🔒 Protection Against DHCP-Based Attacks* - Overview of DHCP starvation and poisoning attacks and their potential impacts on network performance. - Explanation of how DHCP snooping mitigates these attacks by filtering malicious DHCP messages. - Understanding the role of DHCP snooping in ensuring network security against common DHCP-based threats. 09:15 *📩 DHCP Message Types and Filtering* - Classification of DHCP messages into server and client types for filtering purposes. - Explanation of how DHCP snooping distinguishes between server and client messages to decide their fate. - Importance of understanding DHCP message types for effective DHCP snooping configuration. 12:55 *⚙️ DHCP Snooping Configuration on Switches* - Step-by-step guide to configuring DHCP snooping globally and per VLAN on Cisco switches. - Explanation of trusted port configuration and its significance in DHCP snooping operations. - Understanding the DHCP snooping binding table and its role in DHCP message validation. 15:12 *📈 Rate-Limiting for DHCP Messages* - Introduction to rate-limiting functionality in DHCP snooping to prevent network congestion and attacks. - Configuration steps for implementing rate-limiting on switch interfaces to control DHCP message influx. - Understanding the significance of rate-limiting in maintaining network stability and security. 17:26 *🛑 Handling DHCP Option 82 Issues* - Explanation of DHCP Option 82 and its potential impact on DHCP snooping operations. - Demonstration of how to disable Option 82 to resolve compatibility issues in DHCP snooping deployments. - Importance of addressing Option 82 concerns for seamless DHCP snooping functionality. 20:39 *🎓 Recap and Quiz Review* - Summary of DHCP snooping concepts covered in the video. - Review of quiz questions to reinforce understanding of DHCP snooping principles and configurations. - Preparation for bonus practice question from Boson Software’s ExSim for CCNA. Made with HARPA AI

[@deepbaban6864]

How much time is required to pass CCNA if i start to study from scratch.

[@JeremysITLab]

4-6 months on average

[@mohamedqasim1789]

Hi Jeremy I cant find the video content of your 2 tier or 3 tier ,spine leaf network topology architecture.. Please kindly share the link

[@JeremysITLab]

It's not on KZbin yet

[@mohamedqasim1789]

@@JeremysITLab thank u jeremy...

[@amiraljrah1584]

❤️ ❤️

[@simplytamil7759]

Does this course enough to pass the ccna exam? And tell me howmany percent of portions covered till day 50 video now??? Howmany videos are there to cover all topics

[@JeremysITLab]

Not finished yet. Not sure how many more videos there will be.

[@simplytamil7759]

@@JeremysITLab i hope you will upload complete course..isn't it?

[@carpediem8807]

@@JeremysITLab maybe you can say approximately - 1, 10 or 30.

[@AzmiBesar]

Is your course on teachable completed? I will gladly pay for it because you deserve to get paid.

[@JeremysITLab]

Not finished yet! You can check the progress here: jeremysitlab.com/ccna-course-progress

[@lsoli7021]

@@JeremysITLab Jeremy, i know it adds you more work, but maybe you can add a link to your video on every theme in this table.

[@mohamedmusthafa624]

When will this course finish?

[@thomasploutonas4065]

If you are in a hurry do not forget that our CCNA God has a course on teachable ( jeremysitlab.teachable.com/ ) which is like 2 months ahead of this youtube course. It also has a bonus quiz in the end of each lecture + lab.

[@nelsoncorreia7293]

Make sure to watch until the end of the video for a bonus practice question from Boson Software's ExSim for CCNA, my recommended practice exams for the CCNA.