DHCP Relay Commands
page 32-34 OmniSwitch 6250 CLI Reference Guide November 2009
ip helper dhcp-snooping port ip-source-filtering
Configures the IP source filtering status for the port. When this function is enabled, traffic on the port is
restricted to packets received on the port that contain the client MAC address and IP address. All other
packets are dropped.
ip helper dhcp-snooping port slot1/port1[-port1a] ip-source-filtering {enable | disable}
Syntax Definitions
slot1/port1[-port1a] Specifies the slot number for the module and the physical port number
on that module (e.g. 3/1 specifies port 1 on slot 3). Use a hyphen to
specify a range of ports (e.g. 3/1-16).
enable Enables IP source filtering for the specified port.
disable Disables IP source filtering for the specified port.
Defaults
By default, IP source filtering is disabled for the port.
Platforms Supported
OmniSwitch 6250
Usage Guidelines
• IP source filtering applies only to ports that are associated with a VLAN that has DHCP Snooping
enabled or to all ports when DHCP Snooping is globally enabled for the switch.
• The DHCP Snooping binding table is used to verify client information.
• If a device connected to a DHCP Snooping port with IP source filtering enabled does not have a valid
IP address lease from the trusted DHCP server, then all IP traffic for that device is blocked on the port.
• Disable IP source filtering for the DHCP Snooping port to allow a device to obtain a valid IP address
lease.
• Once a device obtains a valid lease or if a device already has a valid lease, then only source bound traf-
fic is allowed.
Examples
-> ip helper dhcp-snooping port 1/24 ip-source-filtering enable
-> ip helper dhcp-snooping port 2/1-10 ip-source-filtering enable
-> ip helper dhcp-snooping port 4/8 ip-source-filtering disable
-> ip helper dhcp-snooping port 3/1-5 ip-source-filtering disable
Release History
Release 6.6.1; command was introduced.
To Next Page
Loading...
