D-Link xStack DES-3500 Series, Руководство пользователя

Страница: 209 / 322

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
205
27
F
ILTER
C
OMMANDS
(DHCP/N
ET
BIOS)
DHCP Server Screening Setting and DHCP Client Filtering Setting
Due to this function allow you not only to restrict all DHCP Server packets but also to receive any specified DHCP server packet
by any specified DHCP client, it is useful when one or more than one DHCP servers are present on the network and both provide
DHCP services to different distinct groups of clients. Enabling the DHCP filter in the first time will create both an access profile
and access rule per port, then creat other access rules following. These rules are used to block all DHCP server packets. Similarly,
addition of a permit DHCP entry will create one access profile and create one access rule only in the first time where DHCP client
MAC address is the client MAC address, and the Source IP address is the same as the DHCP server’s IP address (UDP port
number 67). These rules are used to permit the DHCP server packets with specific fileds, which the user configured.
When DHCP Server filter function is enabled, all DHCP Server packets will be filtered from a specific port. Also, you are allowed
to create entries for specific Server IP address and Client MAC address binding by port-based. Be aware that the DHCP Server
filter function must be enabled first. Once all setting is done, all DHCP Server packets will be filtered from a specific port except
those that meet the Server IP Address and Client MAC Address binding
NetBIOS Filtering Setting
When the NetBIOS filter is enabled, all NetBIOS packets will be filtered from the specified port. Enabling the NetBIOS filter
will create one access profile and create three access rules per port (UDP port numbers 137 and 138 and TCP port number 139).
For Extensive NetBIOS Filter, when it is enabled, all NetBIOS packets over 802.3 frames will be filtered from the specified port.
This command is used to configure the state of the NetBIOS filter. Enabling the Extensive NetBIOS filter will create one access
profile and create one access rule per port (DSAP (Destination Service Access Point) =F0, and SASP (Source Service Access
Point) =F0).
The DHCP/NetBIOS Filter commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in
the following table.
Command Parameters
config filter dhcp_server add permit server_ip <ipaddr> client_mac <macaddr> ports
[<portlist>|all] | delete permit server_ip <ipaddr> [client_mac <macaddr> |
all] | ports [<portlist> | all] state [enable|disable]
show filter dhcp_server
config filter netbios <portlist> state [enable|disable]
show filter netbios
config filter
extensive_netbios <portlist> state [enable|disable]
show filter
extensive_netbios
Each command is listed, in detail, in the following sections.