75
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Enable DHCP-REQUEST check.
dhcp snooping check
request-message
By default, DHCP-REQUEST
check is disabled.
You can enable DHCP-REQUEST
check only on Layer 2 Ethernet
interfaces.
Configuring DHCP packet rate limit
Perform this task to configure the maximum rate at which an interface can receive DHCP packets. This
feature discards exceeding DHCP packets to prevent attacks that send large numbers of DHCP packets.
To configure DHCP packet rate limit:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configure the maximum rate at
which the interface can receive
DHCP packets.
dhcp snooping rate-limit
rate
By default, incoming DHCP
packets are not rate limited.
You can configure this command
only on Layer 2 Ethernet
interfaces.
Displaying and maintaining DHCP snooping
Execute
display
commands in any view, and
reset
commands in user view.
Task Command Remarks
Display DHCP snooping entries.
display dhcp snooping binding
[
ip
ip-address
[
vlan
vlan-id
] ]
Available in any
view.
Display Option 82 configuration
information on the DHCP snooping
device.
display dhcp snooping information
{
all
|
interface
interface-type interface-number
}
Available in any
view.
Display DHCP packet statistics on the
DHCP snooping device (MSR
2600/MSR 3600).
display dhcp snooping packet statistics
Available in any
view.
Display DHCP packet statistics on the
DHCP snooping device (MSR 5600).
display dhcp snooping packet statistics
[
slot
slot-number
]
Available in any
view.
Display information about trusted
ports.
display dhcp snooping trust
Available in any
view.
Summary of Contents for MSR 2600 Series
Page 6: ...We appreciate your comments...
Page 33: ...18 AC vlan1 quit...
Page 118: ...103...
