D-Link xStack DES-3528 Series - Page 288

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
288
config filter dhcp_server
Purpose
DHCP server packets except those that have been IP/client MAC bound will be filtered. This
command is used to configure the state of the function for filtering of DHCP server packet
and to add/delete the DHCP server/client binding entry.
Syntax config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>}
ports [<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | ports [<portlist> | all] state [enable | disable] |
illegal_server_log_suppress_duration [1min | 5min | 30min] | trap_log [enable |
disable]]
Description
This command has two purposes: to filter all DHCP server packets on the specified port(s)
and to allow some DHCP server packets to be forwarded if they are on the pre-defined
server IP address/MAC address binding list. Thus the DHCP server can be restricted to
service a specified DHCP client. This is useful when there are two or more DHCP servers
present on a network.
Parameters add permit - Specifies to add a DHCP permit.
server_ip - The IP address of the DHCP server to be filtered.
<ipaddr> - Enter the DHCP server IP address here.
client_mac - (Optional) The MAC address of the DHCP client.
<macaddr> - Enter the DHCP client MAC address here.
ports - The port number of filter DHCP server.
<portlist> - Enter the list of ports to be configured here.
all - Specifies that all the port will be used for this configuration.
delete permit - Specifies to delete a DHCP permit.
server_ip - The IP address of the DHCP server to be filtered.
<ipaddr> - Enter the DHCP server IP address here.
client_mac - (Optional) The MAC address of the DHCP client.
<macaddr> - Enter the DHCP client MAC address here.
ports - The port number of filter DHCP server.
<portlist> - Enter the list of ports to be configured here.
all - Specifies that all the port will be used for this configuration.
state - Specifies to enable or disable the filter DHCP server state
enable - Specifies that the filter HDCP server state will be enabled.
disable - Specifies that the filter HDCP server state will be disabled.
Illegal_server_log_suppress_duration – Specifies that the illegal server log suppress duration
option will be configured.
1min - Specfies that the suppress duration will be set to 1 minute.
5min - Specfies that the suppress duration will be set to 5 minutes.
30min - Specfies that the suppress duration will be set to 30 minutes.
trap_log – Specifies that the trap/log option will be enabled or disabled.
enable - Specifies that the DHCP server trap/log function will be enabled.
disable - Specifies that the DHCP server trap/log function will be disabled.
Restrictions
Only Administrator and Operator and Power-User-level users can issue this command.
Enabling the DHCP filter will create one access profile and create one access rule per port
(UDP port 67).
Addition of a DHCP filter permit entry will create one access profile and create one access
rule (DA = client MAC address, SA = source IP address and UDP port 67).
Example usage:
To add an entry from the DHCP server/client filter list in the Switch’s database:
DES-3528:admin# config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-
00-00-00-00-01 port 1-26
Command: config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-00-00-
00-00-01 port 1-26