ip helper-address
16-12 IP Configuration
Defaults
None.
Mode
Interfaceconfiguration:C2(su)‐>Router1(Config‐if(Vlan1))#
Usage
Directedbroadcastisanefficientmechanismforcommunicatingwithmultiplehostsonanetwork
whileonlytransmittingasingledatagram.Adirectedbroadcastisapacketsenttoallhostsona
specificnetworkorsubnet.Thedirectedbroadcastaddressincludesthenetworkorsubnetfields,
withthebinarybitsof
thehostportionoftheaddresssettoone.Forexample,foranetworkwith
theaddress192.168.0.0,thedirectedbroadcastaddresswouldbe192.168.255.255.Forasubnet
withtheaddress192.168.12.0,thedirectedbroadcastaddresswouldbe192.168.12.255.
InordertominimizebroadcastDoSattacks,forwardingofdirectedbroadcastsis
disabledby
defaultontheSecureStackC2,asrecommendedbyRFC2644.
Iftheabilitytosenddirectedbroadcaststoanetworkisrequired,youshouldenabledirected
broadcastsonlyontheoneinterfacethatwillbetransmittingthedatagrams.Forexample,ifa
SecureStackC2hasfiveroutedinterfacesfor
the10,20,30,40,and50networks,enablingdirected
broadcastonlyonthe30networkinterfacewillallowanyonefromanyothernetworks(10,20,40,
50)tosenddirectedbroadcasttothe30network.
Example
ThisexampleshowshowtoenableIPdirectedbroadcastsonVLAN1:
C2(su)->router(Config)#interface vlan 1
C2(su)->router(Config-if(Vlan 1))#ip directed-broadcast
ip helper-address
UsethiscommandtoenabletheDHCP/BOOTPrelayagentonaSecureStackC2routedinterface.
EnablingtherelayagentallowsforwardingofclientDHCP/BOOTPrequeststoaDHCP/BOOTP
serverthatdoesnotresideonthesamebroadcastdomainastheclient.Upto6IPhelperaddresses
maybeconfiguredper
interface.
ThenoformofthiscommanddisablestheforwardingofUDPdatagramstothespecifiedaddress.
Syntax
ip helper-address address
no ip helper-address address
Parameters
Defaults
None.
Mode
Interfaceconfiguration:C2(su)‐>Router1(Config‐if(Vlan1))#
address AddressofthehostwhereUDPbroadcastpacketsshouldbeforwarded.