The answer is DHCP snooping
DHCP snooping acts like a firewall between DHCP servers and untrusted hosts. It differentiates untrusted interfaces connected to the end user and trusted interfaces connected to a switch or DHCP. For DHCP snooping to function correctly, the switches must be connected to all DHCP servers through trusted interfaces.