set dhcpsnooping limit
23-8 DHCP Snooping and Dynamic ARP Inspection
Parameters
Defaults
Disabled.
Mode
Switch command, read-write.
Usage
The DHCP snooping application processes incoming DHCP messages. For DHCPRELEASE and
DHCPDECLINE messages, the application compares the receive interface and VLAN with the
client's interface and VLAN in the bindings database. If the interfaces do not match, the
application logs the event if logging has been enabled.
Use the show dhcpsnooping command to display the status (enabled or disabled) of logging
invalid packets for each interface in an enabled VLAN. The show dhcpsnooping statistics
command shows the actual number of server messages received on untrusted ports.
Example
This example enables logging of invalid DHCP messages on port ge.1.1 and then displays the
DHCP configuration settings.
C3
(rw)->set dhcpsnooping log invalid port ge.1.1 enable
C3(su)->show dhcpsnooping
DHCP snooping is Disabled
DHCP snooping source MAC verification is enabled
DHCP snooping is enabled on the following VLANs:
3
Interface Trusted Log Invalid Pkts
----------- ---------- ----------------
ge.1.1 No Yes
ge.1.2 No No
ge.1.3 Yes No
set dhcpsnooping limit
Use this command to configure rate limiting parameters for incoming DHCP packets on a port or
ports.
Syntax
set dhcpsnooping limit port-string {none | rate pps {burst interval secs]}
port port-string Specifies the port or ports on which to enable or disable logging of
invalid packets.
enable | disable Enables or disables logging on the specified ports.
To Next Page
Loading...
Need help?
General