HP 800 Series, User Manual

Page: 141 / 586

System Configuration
Quarantining, DHCP
3-93
• Restrict enforcement of DHCP requests to quarantine and non-quarantine
subnets
– Specify individual DHCP relay agent IP addresses, separated
by carriage returns in the
DHCP relay IP addresses to enforce
text box.
These addresses must be a subset of either the quarantined or non-
quarantined subnets. This limits the enforcement scope to DHCP
requests relayed via these IP addresses, allowing you to restrict
enforcement to only those DHCP requests which are forwarded via
particular routers or Layer 3 switches. If set, DHCP traffic coming
from a source IP not listed will be passed without intervention.
NOTE:
Construction of the DHCP relay packet's source IP address is vendor-depen-
dent. Some implementations (for example, Extreme) use the IP address of
the interface closest to the DHCP server as the source IP for DHCP forward-
ing, which means the resultant packet may not have a source IP that corre-
sponds to those used on the endpoint's physical subnet. Check your switch
vendor's implementation to be sure you are entering correct IP information.
3. Click ok .
Adding a DHCP Quarantine Area
To add a quarantine area:
Home window>>System configuration>>Quarantining>>DHCP quarantine
method radio button>>DHCP quarantine areas area