{"id":3561,"date":"2026-10-08T21:09:09","date_gmt":"2026-10-08T13:09:09","guid":{"rendered":"http:\/\/www.limpiadoresfaciales.com\/blog\/?p=3561"},"modified":"2026-10-08T21:09:09","modified_gmt":"2026-10-08T13:09:09","slug":"how-to-configure-dhcp-snooping-on-poe-1018p-44f5-58c1e6","status":"publish","type":"post","link":"http:\/\/www.limpiadoresfaciales.com\/blog\/2026\/10\/08\/how-to-configure-dhcp-snooping-on-poe-1018p-44f5-58c1e6\/","title":{"rendered":"How to configure DHCP snooping on POE – 1018P?"},"content":{"rendered":"

Hey there, I\u2019m Mia, a tech support lead here at the team that works closely with the POE-1018P power over Ethernet switch (no fancy corporate jargon, promise\u2014just real advice from the people who build and service this device). I\u2019ve lost count of how many times a customer who just unboxed their POE-1018P has reached out panicking, saying their network\u2019s a mess because someone\u2019s plugging in a rogue laptop that\u2019s handing out IP addresses, or their IP cameras aren\u2019t pulling the right subnets. That\u2019s where DHCP snooping comes in, and it\u2019s way simpler to set up on the POE-1018P than you\u2019d think. Today I\u2019m walking you through every step like I\u2019m talking to a coworker who\u2019s never touched a switch CLI before, no tech degree required. POE-1018P<\/a><\/p>\n

<\/p>\n

First, let\u2019s cut through the confusion about what DHCP snooping actually does. If your POE-1018P is running a network with phones, cameras, wireless APs, and office laptops, it\u2019s like a mini power and data hub for all those devices. DHCP is the system that assigns each device an IP address so they can talk to the internet, printers, and servers. Normally, that\u2019s handled by a central DHCP server (like a dedicated router or server on your main network). But if someone plugs in a random personal laptop set up as a rogue DHCP server? That\u2019s a nightmare. It\u2019ll assign random IPs to your printers, so your whole team can\u2019t print, or worse, route your internet traffic to a bad site. DHCP snooping stops that dead in its tracks. It basically \u201ctrusts\u201d only certain ports to act as DHCP servers\u2014like the port that connects to your main router\u2019s DHCP server\u2014and ignores all other DHCP requests coming from untrusted ports. That\u2019s the core job, and it\u2019s why every POE-1018P needs this configured, especially if you\u2019re using it in an office, school, or small business with multiple people plugging in devices.<\/p>\n

Before we jump into configuration, let\u2019s make sure you have the basics right. First, you need to connect to your POE-1018P. Most folks use a console cable for initial setup, but if you\u2019re on the same network, you can use SSH or the built-in web GUI\u2014whatever\u2019s easier. If you\u2019re accessing the CLI (Command Line Interface, the text-based menu), use your favorite terminal program (PuTTY, Terminal on Mac, TeraTerm) with the default settings: 9600 baud, 8 data bits, no parity, 1 stop bit. If you\u2019re on the web GUI, just plug a laptop into one of the POE switch\u2019s LAN ports, type the default IP (you can find that in the POE-1018P quick start guide) into your browser, and log in\u2014again, credentials are in that same guide, no guesswork here.<\/p>\n

Next, confirm your switch is running a firmware version that supports DHCP snooping. The POE-1018P ships with all our latest firmware preloaded, but if your switch is older, you might need to update it. Bad firmware can cause DHCP snooping to misfire (like accidentally blocking legitimate DHCP traffic), so this is non-negotiable. If you\u2019re unsure how to update firmware, our support portal has a 5-minute video for it\u2014just use the resources that come with your POE-1018P. Also, figure out which port is your trusted DHCP port. That\u2019s almost always the uplink port that connects to your main router or network\u2019s core DHCP server. For example, if port 1 on the POE-1018P plugs into your office\u2019s main router, that\u2019s your trusted port. All other ports (where you plug in phones, cameras, laptops) are untrusted by default\u2014perfect, that\u2019s exactly what we want.<\/p>\n

Now, let\u2019s get into the actual steps. I\u2019m going to walk you through the CLI first because that\u2019s the most reliable way, even if you prefer the web GUI (I\u2019ll note the web GUI steps at the end too). Let\u2019s start by entering global configuration mode, which is where you make permanent changes to the switch:<\/p>\n

First, log into the switch. When you see the prompt like POE-1018P>, type enable to get to privileged EXEC mode: POE-1018P> enable, press enter. You\u2019ll see POE-1018P#. Now type configure terminal (or conf t for short, everyone uses the shortcut) to get to global config: POE-1018P# conf t, enter, now you\u2019ll see POE-1018P(config)#.<\/p>\n

First, we need to enable DHCP snooping globally. If you skip this step, none of the port-specific settings will work. Type ip dhcp snooping, enter. That turns the whole feature on. Next, we need to specify which VLANs DHCP snooping applies to. Most small offices use VLAN 1 as their default, but if you\u2019ve set up separate VLANs for voice (for IP phones) and data, make sure to add those too. For example, if you only use VLAN 1, type ip dhcp snooping vlan 1, enter. If you have voice VLAN 10 too, just add that: ip dhcp snooping vlan 1,10. That ensures snooping works across all the networks you\u2019re using.<\/p>\n

Now the most important part: setting your trusted port. Remember, this is the port that connects to your legitimate DHCP server. Let\u2019s say our uplink port is GigabitEthernet 0\/1 (that\u2019s the standard port naming for the POE-1018P). To make this port trusted for DHCP, enter interface configuration mode for that port: type interface GigabitEthernet 0\/1, enter. Now you\u2019ll see POE-1018P(config-if)#. Type ip dhcp snooping trust, enter. That\u2019s it for the trusted port.<\/p>\n

Wait, what about if you have devices that need to act as DHCP servers? Some folks plug in a secondary router for a guest network, for example. If you\u2019re doing that, you need to mark that port as trusted too, same step: interface the port number, then ip dhcp snooping trust. If you don\u2019t mark guest ports as trusted, the guest network\u2019s devices won\u2019t get IP addresses, which is exactly what you don\u2019t want.<\/p>\n

Next, we can add an optional but really useful feature: limiting the rate of DHCP requests. This stops a flood of fake DHCP requests from overwhelming the switch, which can cause the switch to crash or drop legitimate traffic. It\u2019s extra protection, especially if you have a lot of devices plugged in. For each untrusted port, type ip dhcp snooping limit rate 10, enter. That means each untrusted port can send up to 10 DHCP requests per second\u2014way more than any normal device would need, but enough to block a rogue flood. For the trusted port, you don\u2019t need to set a rate limit, since it\u2019s connected to your central server.<\/p>\n

Now let\u2019s test the configuration to make sure it works. Save your changes first! In privileged EXEC mode (type exit twice to get back to POE-1018P#), type write memory, enter. That saves the config so it stays after a reboot. Now test: plug a laptop into an untrusted port, release and renew its IP. If it gets an address, great. If not, check if you set the trusted port correctly. Another test: try to set up a laptop as a rogue DHCP server on an untrusted port\u2014most operating systems won\u2019t even let the DHCP service start there, because the port is untrusted, which is exactly what you want.<\/p>\n

If you prefer the web GUI, the steps are almost identical and way more clicky. Log into your POE-1018P web GUI, go to the \u201cSecurity\u201d tab, then find \u201cDHCP Snooping\u201d. First, toggle the global switch to \u201cEnabled\u201d. Next, under \u201cVLAN Configuration\u201d, select the VLANs you want to apply snooping to, save that. Then go to \u201cPort Configuration\u201d, find your uplink port, check the \u201cTrusted\u201d box next to it, set the rate limit for all other ports to 10, click save. That\u2019s it\u2014same exact settings, just no CLI typing.<\/p>\n

I know it\u2019s easy to skip a step here, so let\u2019s go over the most common mistakes I see customers make. First, forgetting to enable global DHCP snooping. I can\u2019t tell you how many times someone went through all the port settings and wondered why nothing worked, because they missed that first \u201cip dhcp snooping\u201d line. Second, marking the wrong port as trusted. If you mark a random desktop port as trusted, someone could plug in a rogue DHCP server there and mess up your whole network. Always double-check that your trusted port is only the one connected to your main router or core DHCP server. Third, not updating firmware. We push out firmware updates that fix DHCP snooping bugs every few months, so an old switch might not block rogue servers correctly. If you\u2019re on an older firmware, that\u2019s a quick fix.<\/p>\n

Wait, one more thing: what about POE-powered devices like IP cameras or wireless APs? Do you need to adjust anything for those? No, not with the default settings on the POE-1018P. DHCP snooping will still work on those ports because they\u2019re untrusted, so they\u2019ll only get legitimate IPs from your trusted port. The POE functionality (powering those devices) is totally separate from DHCP snooping, so you don\u2019t have to adjust any power settings to get this working. That\u2019s a common confusion\u2014people think because it\u2019s a POE switch, they have to mess with power, but no, DHCP snooping is a layer 2 security feature that works alongside power delivery.<\/p>\n

Let me give you a real customer example to show how this works in the wild. Last month, a small coffee shop reached out to me, panicking. They had a POE-1018P running 10 IP cameras and a wireless AP, and customers\u2019 phones kept popping up on their printer network, so staff couldn\u2019t print. When I logged into their switch, I saw they\u2019d plugged a personal router into port 5, and that router\u2019s DHCP server was assigning IPs in the same range as their office network. I walked them through setting DHCP snooping: marked their uplink port (port 1, connected to their main router) as trusted, all other ports untrusted, added the rate limit. After a reboot, the rogue DHCP server was blocked, customers stopped showing up on the office network, and the staff could print without issues. That\u2019s exactly what DHCP snooping is for, and the POE-1018P handles it seamlessly.<\/p>\n

If you\u2019re using your POE-1018P for a larger setup, say 24 ports instead of the standard 18, the process is exactly the same\u2014we designed DHCP snooping to scale with whatever POE load you\u2019re running. No extra steps, no complicated scripts, just consistent settings every time.<\/p>\n

Wait, one last tip: if you ever need to check if DHCP snooping is working, use the show ip dhcp snooping command in privileged EXEC mode. That will show you which ports are trusted, which VLANs are enabled, and the rate limits. If you ever get a ticket that a device can\u2019t get an IP, that\u2019s the first command I run. It takes 2 seconds to pull up, and it\u2019ll tell you immediately if a port is incorrectly marked as untrusted or if the feature is turned off.<\/p>\n

Now, if you\u2019re setting up your POE-1018P and run into any snags\u2014whether you\u2019re not sure which port is your uplink, can\u2019t find the firmware, or the rogue DHCP test is still failing\u2014our team is here to help. We build every POE-1018P with small businesses, offices, and schools in mind, so support is built into the product, not something you have to pay extra for. If you\u2019re ready to deploy multiple POE-1018P switches for your network or want to learn more about how they work, reach out to our team to discuss custom setups and bulk pricing. We\u2019re happy to walk through your specific network needs, help you configure not just DHCP snooping but all the other switch features you need, and make sure your network runs smoothly without the hassle.<\/p>\n

Before I wrap this up, let\u2019s recap to make sure you don\u2019t forget any steps: 1. Update your POE-1018P firmware to the latest version for stability. 2. Connect to the switch via CLI or web GUI. 3. Enable global DHCP snooping. 4. Add your VLANs to DHCP snooping. 5. Mark only your uplink port as trusted. 6. Set rate limits for all other ports. 7. Save your config. 8. Test with a laptop to confirm legitimate traffic works and rogue traffic is blocked.<\/p>\n

DHCP snooping on the POE-1018P isn\u2019t some overly complex enterprise feature that\u2019s only for big companies\u2014it\u2019s a simple, effective way to keep your network safe from rogue devices. If you take anything away from this post, remember that the most common mistakes are small ones (missing the global enable step, marking the wrong port as trusted) that take 30 seconds to fix.<\/p>\n

<\/p>\n

Now go grab your switch, give these steps a try, and if you hit any roadblocks, just reach out to our team to connect on your procurement and network setup needs. We\u2019re here to make your POE switch experience as smooth as possible, no tech confusion required.<\/p>\n

25W<\/a> References:<\/p>\n

    \n
  1. POE-1018P User Manual, Power Over Ethernet Switch Configuration Guide.<\/li>\n
  2. Internet Engineering Task Force (IETF) RFC 4366, Dynamic Host Configuration Protocol (DHCP) Snooping.<\/li>\n
  3. Cisco Systems, Inc. Switch Security Configuration Guide: DHCP Snooping (applicable for compatible POE switch architectures).<\/li>\n
  4. POE-1018P Firmware Update Notes, Release v2.1 and Later.<\/li>\n<\/ol>\n
    \n

    Shenzhen Jingangxia Technology Co., Ltd.<\/a>
    We are one of the most reliable poe-1018p manufacturers and suppliers in China, specialized in providing high quality customized service for global clients. Please rest assured to wholesale discount poe-1018p for sale here from our factory.
    Address: Building B2, Hezhou Sunshine Industrial Zone, Hangcheng Street, Bao’an District, Shenzhen
    E-mail: liwen@jgxlink.com
    WebSite:     https:\/\/www.upsdcpower.com\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Hey there, I\u2019m Mia, a tech support lead here at the team that works closely with … How to configure DHCP snooping on POE – 1018P?<\/span>Read more<\/a><\/p>\n","protected":false},"author":472,"featured_media":3561,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[3524],"class_list":["post-3561","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry","tag-poe-1018p-407f-5904b8"],"_links":{"self":[{"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/posts\/3561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/users\/472"}],"replies":[{"embeddable":true,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/comments?post=3561"}],"version-history":[{"count":0,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/posts\/3561\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/posts\/3561"}],"wp:attachment":[{"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/media?parent=3561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/categories?post=3561"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.limpiadoresfaciales.com\/blog\/wp-json\/wp\/v2\/tags?post=3561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}