94
S-channel interface/S-channel aggregate interface view
VSI interface/VSI aggregate interface view
Predefined user roles
network-admin
Parameters
rate: Specifies the maximum rate for an interface to receive DHCP packets, in Kbps. The value must
be an integer multiple of 8 in the range of 64 to 512.
Usage guidelines
This command takes effect only when DHCP snooping is enabled.
With the rate limit feature, the interface discards DHCP packets that exceed the maximum rate.
If you configure this command on a Layer 2 Ethernet interface that is a member port of a Layer 2
aggregate interface, the Layer 2 Ethernet interface uses the DHCP packet maximum rate configured
on the Layer 2 aggregate interface. If the Layer 2 Ethernet interface leaves the aggregation group, it
uses its own DHCP packet maximum rate.
Examples
# Set the maximum rate at which the Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 can
receive DHCP packet to 64 Kbps.
<Sysname> system-view
[Sysname] interface Ten-GigabitEthernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dhcp snooping rate-limit 64
dhcp snooping trust
Use dhcp snooping trust to configure a port as a trusted port.
Use undo dhcp snooping trust to restore the default state of a port.
Syntax
dhcp snooping trust
undo dhcp snooping trust
Default
After you enable DHCP snooping, all ports are untrusted.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
Usage guidelines
Specify the ports facing the DHCP server as trusted ports and specify the other ports as untrusted
ports so DHCP clients can obtain valid IP addresses.
Examples
# Specify the Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 as a trusted port.
<Sysname> system-view
[Sysname] interface Ten-GigabitEthernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dhcp snooping trust