99
Configuring DHCP packet rate limit
The following matrix shows the feature and hardware compatibility:
Hardware DHCP packet rate limit compatibility
MSR954(JH296A/JH297A/JH298A/JH299A/JH373A) No
MSR958(JH300A/JH301A) No
MSR1002-4/1003-8S Yes
MSR2003 Yes
MSR2004-24/2004-48 Yes
MSR3012/3024/3044/3064 Yes
MSR4060/4080 Yes
Perform this task to set the maximum rate at which an interface can receive DHCP packets. This
feature discards exceeding DHCP packets to prevent attacks that send large numbers of DHCP
packets.
To configure DHCP packet rate limit:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Set the maximum rate at which
the interface can receive
DHCP packets.
dhcp snooping rate-limit
rate
By default, incoming DHCP packets
are not rate limited.
You can configure this command
only on Layer 2 Ethernet interfaces
and Layer 2 aggregate interfaces.
The rate set on the Layer 2
aggregate interface applies to all
members of the aggregate interface.
If a member interface leaves the
aggregation group, it uses the rate
set in its Ethernet interface view.
Configuring a DHCP packet blocking port
The following matrix shows the feature and hardware compatibility:
Hardware
DHCP packet blocking port
compatibility
MSR954(JH296A/JH297A/JH298A/JH299A/JH373A) No
MSR958(JH300A/JH301A) No
MSR1002-4/1003-8S Yes
MSR2003 Yes
MSR2004-24/2004-48 Yes