DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet User Manual
232
Figure 8- 43 DHCP Screening Port Settings window
The following parameters can be set:
Parameter Description
DHCP Server
Screening Trap Log
State
Enable or disable the DHCP server screening trap and log state. The default value is
Disabled.
Illegitimate Server
Log Suppress
Duration
Select the desired illegitimate server log suppress duration: 1 min, 5 mins, or 30 mins. The
default value is 5 mins.
From Port /To Port
A consecutive group of ports may be configured starting with the selected port.
State Choose Enabled to enable the DHCP server or Disabled to disable. The default is Disabled.
After setting the previous parameters, click Apply to allow your changes to be implemented. The DHCP Port
Information Table shows which ports are enabled or disabled for DHCP Sever Screening.
DHCP Offer Permit Entry Settings
This function allows the user not only to restrict all DHCP Server packets but also to receive any specified DHCP
server packet by any specified DHCP client, it is useful when one or more DHCP servers are present on the network
and both provide DHCP services to different distinct groups of clients. The first time the DHCP filter is enabled it will
create both an access profile entry and an access rule per port entry, it will also create other access rules. These rules
are used to block all DHCP server packets. In addition to a permit DHCP entry, it will also create one access profile
and one access rule entry the first time the DHCP client MAC address is used as the client MAC address. The Source
IP address is the same as the DHCP server’s IP address (UDP source port number 67). These rules are used to
permit the DHCP server packets with specific fields, which the user has configured.
To view this window, click Security > DHCP Server Screening > DHCP Offer Permit Entry Settings, as shown
below:
Figure 8- 44 DHCP Offer Permit Entry Settings window
To Next Page
Loading...
