DHCP snooping provides a mechanism to prevent a malicious host masquerading as a DHCP server from assigning IP addresses (and
related configuration) to DHCP clients. In addition, DHCP snooping prevents certain denial of service attacks on the DHCP
DHCP snooping requires you to configure a trust setting for ports, which is used to differentiate between trusted and untrusted
In addition, DHCP snooping learns IP addresses assigned by the DHCP server, so that other security features (for example,
Dynamic ARP inspection and IP source guard) can function when DHCP is used to assign IP addresses to interfaces.