ELTEX MA4000-PX, Руководство по эксплуатации и обслуживанию

Страница: 82 / 181

82 User Manual, Part III
Subscriber access/aggregation node МA4000-РХ
ma4000(config-dhcp-ra)("dhcp-ra-01")# add-suboptions
Step 4. If necessary, define DHCPv6 option 37 and 38 formats, using add-remote-id and add-
interface-id commands. The list of tokens is represented in Table 19.
ma4000(config-dhcpv6-ra)("dhcp-rav6-01")# add-interface-id "%PONSERIAL%"
ma4000(config-dhcpv6-ra)("dhcp-rav6-01")# add-remote-id "%OPT82_RID%"
Step 5. If necessary, activate protection against DoS attacks, using dos-block command. Set the
threshold of DHCP request rate. If the threshold is exceeded, DHCP requests transmissions will be
blocked by
dos-block packet-limit command. Define the time of blocking in seconds, using dos-block
block-time command:
ma4000(config-dhcpv6-ra)("dhcpv6-ra-01")# dos-block
ma4000(config-dhcpv6-ra)("dhcpv6-ra-01")# dos-block packet-limit 200
ma4000(config-dhcpv6-ra)("dhcpv6-ra-01")# dos-block block-time 300
Step 6. Configure a list of trusted DHCP servers by trusted primary and trusted secondary
commands. Define the timeout for DHCP servers by trusted timeout command. Activate filtration
mechanism by trusted command:
ma4000(config-dhcpv6-ra)("dhcp-rav6-01")# trusted primary 1010::1
ma4000(config-dhcpv6-ra)("dhcp-rav6-01")# trusted secondary 1010::2
ma4000(config-dhcpv6ra)("dhcp-rav6-01")# trusted timeout 200
ma4000(config-dhcpv6-ra)("dhcp-rav6-01")# trusted
Step 7. Apply the changes, using commit command:
ma4000(config-dhcp-ra)("dhcp-ra-01")# do commit
To apply the changes, OLT should be reconfigured.
24.6 DHCP Broadcast-to-Unicast Relay Agent Configuration
To reduce the broadcast traffic and avoid answers of illegal DHCP-servers there is an ability to use
unicast messages to interact with specified DHCP-server.
Step 1. Create L3 interface: define IP address on VLAN in which customer devices are located,
using ip interface command (only for single-tag service).
ma4000(config)# vlan 2000
ma4000(vlan-2000)# ip interface 10.10.10.10/32
Step 2. Create interface-vlan into vlan which is used for uplink to DHCP-server.
ma4000(config)# vlan 1209
ma4000(vlan-1209)# ip interface 192.168.209.240/24
Step 3. Specify DHCP server address used in unicast packets. In case the DHCP-server is located
after the router, we have to use static route to this network.
ma4000(vlan-1209)# relay 192.168.56.1
ma4000(config)# ip route allow 192.168.56.0/24 192.168.209.5