ZXR102900ESeriesCongurationGuide
CommandFunction
showprotocol-protectpriority(allcongurationmodes)Displayspacketpriority
congurationinformation.
showprotocol-protectmac-dropport[<portlist>](allconguration
modes)
Displaystherulesandstatistics
boundwithaspeciedport.
showprotocol-protectmac-droprule[<1-128>](allconguration
modes)
Displaysspeciedmacdroprules.
PPCongurationInstance
lCongurationDescription
SeeFigure5-47,Host1sendsDHCPattackpackets.Userscanviewthedevice
operatingstatusandalarminformation.UsersalsocanviewIGMPoperatingstatus
underDHCPpacketattacks.TheroutersendsIGMPquerypacketsperiodically.
Figure5-47PPCongurationInstance
lCongurationProcedure
zte(cfg)#setigmpsnoopingenable
zte(cfg)#setigmpsnoopingaddvlan1
zte(cfg)#setdhcpsnooping-and-option82enable
zte(cfg)#setdhcpsnoopingaddport1-3
lCongurationVerication
UseHost1tosendDHCPDiscoverpackets.Viewalarminformationontheswitch.
ThuJul117:53:182004Receivetoomanypacketsof'dhcp'fromport1
UseHost2torequestjoiningthemulticastgroup225.0.0.1.Viewthemulticastentity
onthedevice.
zte(cfg)#showigmpsnoopingvlan
Maximalgroupnumber:1024
Currentgroupnumber:1
5-134
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential