Security Measures
180
Instruction Manual - NXA-ENET8-POE+
Perform these steps to configure global settings for DHCP Snooping:
1.
Click
Security
>
DHCP Snooping
.
2.
Select
Configure VLAN
from the Step list.
3.
Enable DHCP Snooping on any existing VLAN.
4.
Click
Apply
.
Configuring Ports for DHCP Snooping
Use the Security > DHCP Snooping (Configure Interface) page to configure switch ports as trusted or untrusted.
Command Usage
A trusted interface is an interface that is configured to receive only messages from within the network. An untrusted
interface is an interface that is configured to receive messages from outside the network or fire wall.
When DHCP snooping is enabled both globally and on a VLAN, DHCP packet filtering will be performed on any untrusted
ports within the VLAN.
When an untrusted port is changed to a trusted port, all the dynamic DHCP snooping bindings associated with this port are
removed.
Set all ports connected to DHCP servers within the local network or fire wall to trusted state. Set all other ports outside the
local network or fire wall to untrusted state.
The following table lists the options on this page:
Perform these steps to configure global settings for DHCP Snooping:
1.
Click
Security
>
DHCP Snooping
.
2.
Select
Configure Interface
from the Step list.
3.
Display the list of ports or trunks.
4.
Configure the trust status, maximum number of supported clients, and the circuit identifier.
5.
Click
Apply
.
FIG. 209
Configuring DHCP Snooping on a VLAN
Security - DHCP Snooping Options
Trust Status
Enables or disables a port as trusted. (Default: Disabled)
Max Number
The maximum number of DHCP clients which can be supported per interface. (Range: 1-32;
Default: 16)
Circuit ID
Specifies DHCP Option 82 circuit ID sub-option information.
• Mode - Specifies the default string
VLAN-Unit-Port
or an arbitrary string. (Default:
VLAN-Unit-Port)
• Value - An arbitrary string inserted into the circuit identifier field. (Range: 1-32 characters)
FIG. 210
Configuring the Port Mode for DHCP Snooping