D-Link xStack DGS-3420 Series

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
332
Chapter 23 DHCP Server
Screening Commands
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist> |
all] | ports [<portlist> | all] state [enable | disable] | illegal_server_log_suppress_duration [1min
| 5min | 30min]]
config filter dhcp_server log [enable | disable]
config filter dhcp_server trap [enable | disable]
show filter dhcp_server
create filter dhcpv6_server permit sip <ipv6addr> ports [<portlist> | all]
config filter dhcpv6_server log [enable | disable]
config filter dhcpv6_server ports [<portlist> | all] state [enable | disable]
config filter dhcpv6_server trap [enable | disable]
show filter dhcpv6_server
delete filter dhcpv6_server permit sip <ipv6addr>
create filter icmpv6_ra_all_node permit sip <ipv6addr> ports [<portlist> | all]
config filter icmpv6_ra_all_node log [enable | disable]
config filter icmpv6_ra_all_node ports [<portlist> | all] state [enable | disable]
config filter icmpv6_ra_all_node trap [enable | disable]
show filter icmpv6_ra_all_node
delete filter icmpv6_ra_all_node permit sip <ipv6addr>
23-1 config filter dhcp_server
Description
This command has two purposes: to specify to filter all DHCP server packets on the specific port and
to specify to allow some DHCP server packets with pre-defined server IP addresses and client MAC
addresses. With this function, we can restrict the DHCP server to service specific DHCP clients. This
is useful when two DHCP servers are present on the network; one of them can provide the private IP
address and the other can provide the public IP address.
Enabling filter DHCP server port state will create one access profile and create one access rule per
port (UDP port = 67). Filter commands in this file will share the same access profile. Addition of a
permit DHCP entry will create one access profile and create one access rule. Filter commands in this
file will share the same access profile.
Format
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist> | all]
| ports [<portlist> | all] state [enable | disable] | illegal_server_log_suppress_duration [1min |
5min | 30min]]