118
Usage guidelines
This command takes effect only when DHCP snooping is enabled.
With the rate limit feature, the interface discards DHCP packets that exceed the maximum rate.
The rate configured on a Layer 2 aggregate interface applies to all members of the aggregate
interface. If a member interface leaves the aggregation group, it uses the rate configured in its
Ethernet interface view.
The device-supported maximum rate is an integer multiple of eight. If you set the maximum rate to 67,
the value 64 or 72 takes effect.
Examples
# Set the maximum rate to 64 Kbps at which Layer 2 Ethernet interface HundredGigE 1/0/1 can
receive DHCP packets.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] dhcp snooping rate-limit 64
dhcp snooping trust
Use dhcp snooping trust to configure a port as a trusted port.
Use undo dhcp snooping trust to restore the default state of a port.
Syntax
dhcp snooping trust
undo dhcp snooping trust
Default
After you enable DHCP snooping, all ports are untrusted.
Views
Layer 2 Ethernet interface/Layer 2 aggregate interface view
Layer 3 Ethernet interface/Layer 3 aggregate interface view
Predefined user roles
network-admin
Usage guidelines
Specify the ports facing the DHCP server as trusted ports and specify the other ports as untrusted
ports so DHCP clients can obtain valid IP addresses.
Examples
# Specify Layer 2 Ethernet interface HundredGigE 1/0/1 as a trusted port.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] dhcp snooping trust
Related commands
display dhcp snooping trust
display dhcp snooping binding
Use display dhcp snooping binding to display DHCP snooping entries.
To Next Page
Loading...
