DGS-6604 ip dhcp screening
CLI Reference Guide
231
ip dhcp screening
Use this command to add/delete the DHCP server/client binding entry.
ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-ID [,
| - ]
no ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-
ID [, | - ]
Default Not configured
Command Mode Global configuration mode
Usage Guideline This command is used to specify explicit "permit" rules for the 3-tuple (DHCP
server IP, client's MAC, port list from which DHCP server is allowed come) to
allow DHCP server packets. DHCP server packets except those met explicated
configured met the server IP /.client MAC binding will be filtered on specified
ports. If client MAC address is not specified, then DHCP server packets will pass
as long as .the server IP matches.
Note: The user needs turn on the port's "DHCP Server Screening" to make all
DHCP server packets are denied by default by command: "ip dhcp screening
ports". If a port's "DHCP Server Screening" doesn't turn on, the "permit" rule is
not effective
Example The following example configures a permit rule to allow DHCP server packet with
source IP address 10.1.1.1 and client MAC address 00-08-01-02-03-04 on
eth4.1-4.34
Syntax Description
IP-ADDRESS DHCP server IP address.
client-mac MAC-
ADDRESS
(Optional) Client MAC address to be associated with a server IP address. It
represents “All Client MAC” if not specified.
INTERFACE-ID [, | - ] The interface should be a physical port or port channel which will be applied.
Specify a series of interfaces, or separate a range of interfaces from a previous
range. No space before and after the comma.
Specifies a range of interfaces. No space before and after the hyphen.
switch#configure terminal
switch(config)#ip dhcp screening server-ip 10.1.1.1 client-mac 00-08-01-02-
03-04 ports eth4.1-4.34
To Next Page
Loading...
