DHCP snooping protects switches from rogue DHCP servers by allowing only trusted ports to hand out IP settings and building secure IP-to-port bindings.