xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
288
config filter dhcp_server
Purpose
DHCP server packets except those that have been IP/client MAC bound will be filtered. This
command is used to configure the state of the function for filtering of DHCP server packet
and to add/delete the DHCP server/client binding entry.
Syntax
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>}
ports [<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | ports [<portlist> | all] state [enable | disable] |
illegal_server_log_suppress_duration [1min | 5min | 30min] | trap_log [enable |
disable]]
Description
This command has two purposes: to filter all DHCP server packets on the specified port(s)
and to allow some DHCP server packets to be forwarded if they are on the pre-defined
server IP address/MAC address binding list. Thus the DHCP server can be restricted to
service a specified DHCP client. This is useful when there are two or more DHCP servers
present on a network.
Parameters
add permit
- Specifies to add a DHCP permit.
server_ip
- The IP address of the DHCP server to be filtered.
<
ipaddr
> - Enter the DHCP server IP address here.
client_mac
- (Optional) The MAC address of the DHCP client.
<
macaddr
> - Enter the DHCP client MAC address here.
ports
- The port number of filter DHCP server.
<
portlist
> - Enter the list of ports to be configured here.
all
- Specifies that all the port will be used for this configuration.
delete permit
- Specifies to delete a DHCP permit.
server_ip
- The IP address of the DHCP server to be filtered.
<
ipaddr
> - Enter the DHCP server IP address here.
client_mac
- (Optional) The MAC address of the DHCP client.
<
macaddr
> - Enter the DHCP client MAC address here.
ports
- The port number of filter DHCP server.
<
portlist
> - Enter the list of ports to be configured here.
all
- Specifies that all the port will be used for this configuration.
state
- Specifies to enable or disable the filter DHCP server state
enable
- Specifies that the filter HDCP server state will be enabled.
disable
- Specifies that the filter HDCP server state will be disabled.
Illegal_server_log_suppress_duration
– Specifies that the illegal server log suppress duration
option will be configured.
1min
- Specfies that the suppress duration will be set to 1 minute.
5min
- Specfies that the suppress duration will be set to 5 minutes.
30min
- Specfies that the suppress duration will be set to 30 minutes.
trap_log
– Specifies that the trap/log option will be enabled or disabled.
enable
- Specifies that the DHCP server trap/log function will be enabled.
disable
- Specifies that the DHCP server trap/log function will be disabled.
Restrictions
Only Administrator and Operator and Power-User-level users can issue this command.
Enabling the DHCP filter will create one access profile and create one access rule per port
(UDP port 67).
Addition of a DHCP filter permit entry will create one access profile and create one access
rule (DA = client MAC address, SA = source IP address and UDP port 67).
Example usage:
To add an entry from the DHCP server/client filter list in the Switch’s database:
DES-3528:admin# config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-
00-00-00-00-01 port 1-26
Command: config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-00-00-
00-00-01 port 1-26