Advanced Settings 18
Excluded IP
Figure 4-16
2) Click
Add IP Range
.
A new record is added. See Figure 4-17.
Add IP range
Figure 4-17
3) Input the IP address range. For example, 192.168.100.2-192.168.100.50.
4) Click
Save
.
4.1.3.2 DHCP Snooping
DHCP Snooping is a security feature of DHCP to make sure that the client acquires the IP
address from the legal server. If there is the illegal server built up privately in the network, the
DCHP client might acquire wrong IP address and network configuration parameter, and
communication will fail. To make sure that the DHCP client acquires the IP address from the
legal DHCP Server, DHCP Snooping security mechanism supports to set the port as
Trusted
and
Untrusted
.
The trusted port can forward the received DHCP packet normally.
The untrusted port discards the DHCP-ACK packet and the DHCP-OFFER packet by
DHCP Server.
Select
Advanced > Configuration > DHCP > Snooping
.
Step 1
DHCP Snooping interface is displayed. See Figure 4-18.