set dhcp-server ATA start-range 192.168.1.100
set dhcp-server ATA end-range 192.168.1.120
set dhcp-server ATA accept-mac 02:68:8c:XX:XX:XX
set dhcp-server ATA router 192.168.1.1
set dhcp-server ATA dns 8.8.8.8
set dhcp-server ATA lease-time 28800
set dhcp-server ATA subnet 255.255.255.0
set dhcp-server ATA option 120 hex 010a0a0b0b
set dhcp-server ATA option 152 ip 10.10.10.11
set dhcp-server ATA option 160 ascii http://172.20.1.24
set dhcp-server ATA on
ANTISPOOFING FUNCTION
You can enable antispoofing functions through which the router blocks all traffic on an interface,
except the one coming from a PC which has a lease already assigned from the router itself. For
example, if you use:
set dhcp-server vlan30 antispoofing
the router sets the filtering rules on packets that block all incoming traffic on VLAN 30, except for
the DHCP requests. When an IP address is assigned to a client, then it is enabled the traffic that has
a released source IP address and as source MAC address the one of the PC that got that address.
To disable the antispoofing functions you must use:
set dhcp-server vlan30 no-antispoofing
REDUNDANT DHCP
The DHCP service can be configured to work in parallel with one or more processes running on
separate router Imola, provided that such processes are configured in the same way and both
connected to the same LAN. Typically these routers are part of a VRRP group.
The configuration of the DHCP process should include the following parameters:
set dhcp-server vlan30 vdhcp
thanks to this, a protocol is activated (proprietary Tiesse) which allows to maintain aligned the
DHCP database of all routers involved. The protocol is based on the use of multicast messages
periodically sent to the group address 239.13.01 port 50011
It is possible to modify the operating parameters through:
set dhcp-server vlan30 vdhcp-interface eth1
set dhcp-server vlan30 vdhcp-group 239.13.0.1
set dhcp-server vlan30 vdhcp-port 5011
set dhcp-server vlan30 vdhcp-tick 3
The protocol of alignment of the database keeps aligned even any antispoofing rules present on any
of the routers.
To Next Page
Loading...
Need help?
General
