We have a DHCP pool configured on Cisco L3 switch for hosts on SVI. Since we want to restrict connectivity to DHCP which is on the same switch.

excluded SVI IP DHCP gateway

Without acl the ipconfig output shows DHCP server as Tried below acl but clients fail to get IP

permit ip any

permit ip

Direction- IN on SVI

what acl should be defined on vlan interface.

1 Answer 1


To allow DHCP:

ip access-list extended ACL-DHCP-NET
permit udp any host eq 67 68
<other rules>

To reject DHCP:

ip access-list extended ACL-STATIC-NET:
deny udp any host eq 67 68
<other rules>

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.