Locate the DHCP bogus server

Hi,
Kindly wait a second, we are processing on your problem already.

Hi @ViktorJr
You can follow the steps below to locate the interface which the bogus server connects to:
1. Find out the bogus server IP when get the assigned IP from the bogus server.
2. Exame the ARP table to find out the interface or equipment which learns the bogus srever.
Repeat step 2 to find out the equipment which bogus server directly connects to, and find out the interface on the equipment to locate the bogus server physical position.

Hello!
You can enable DHCP snooping to prevent such situations for the future:

Commands that enable it at the switch:
dhcp enable
dhcp snooping enable

After that you need to configure trusted interface at witch DHCP server packets will not be droped:
dhcp snooping trusted

After that no bogus DHCP server can work at that switch. It helps me.
You can also fins the alarms that are generated when bogus switch is start to send DHCP packets. I use eSight and it show them for me. I think that something like display alarms active can help with it.