Dasan V5808 - DHCP Lease Limit; Source MAC Address Verification

User Manual UMN:CLI
V5808
349
8.5.7.5 DHCP Lease Limit
The number of entry registrations in DHCP snooping binding table can be limited. If there
are too many DHCP clients on an interface and they request IP address at the same time,
it may cause IP pool exhaustion.
To set the number of entry registrations in DHCP snooping binding table, use the
following command.
Command
Mode
Description
ip dhcp snooping limit-lease
PORTS <1-2147483637>
Global
Enables a DHCP lease limit on a specified untrusted
port.
1-2147483637: the number of entry registrations
no ip dhcp snooping limit-lease
PORTS
Deletes a DHCP lease limit.
You can limit the number of entry registrations only for untrusted interfaces, because the
DHCP snooping binding table only contains the information for DHCP messages from
untrusted interfaces.
To set the number of DHCP discover message per second that an interface can receive
just one DHCP discover message, use the following command.
Command
Mode
Description
ip dhcp snooping limit-rate
discover
Global
Receieves a single DHCP discover message per
second.
no ip dhcp snooping limit-rate
discover
Disable the discover message limit function.
DHCP snooping function should be activated before setting the ip dhcp snooping limit-
rate discover command.
8.5.7.6 Source MAC Address Verification
The V5808 can verify that the source MAC address in a DHCP packet that is received on
untrusted ports matches the client hardware address in the packet. To enable the source
MAC address verification, use the following command.
Command
Mode
Description
ip dhcp snooping verify mac-address
Global
Enables the source MAC address
verification.
no ip dhcp snooping verify mac-address
Disables the source MAC address
verification.
!
i