DHCP snooping
A Layer 2 security feature that classifies switch ports as trusted or untrusted, permits legitimate DHCP server traffic only from trusted paths, and builds a binding table from observed leases. The table can support Dynamic ARP Inspection and IP Source Guard.