153
DHCP Option Filtering
Beginning with Firmware Version 7.7, suppor t for DHCP option filtering is provided via the filterset set-
tings.
set dhcp filterset name "
string
" rule
n
type [ dhcp-option | hw-address | requested-option ]
Specifies a DHCP filterset named string as one of three possible types:
The rule can either specify an option and option contents,
dhcp-option
; a client hardware address
range,
hw-address
; or an option the client is requesting,
requested-option
. For
hw-address
, you will
need to enter
start-address
and
end-address
values; for the others a
dhcp-option
parameter must
be set.
By default a rule is of type
dhcp-option
, for backwards compatibility.
set dhcp filterset name "
string
" rule
n
dhcp-option [ 0... 255 ]
Creates a DHCP filterset named
string
, for example “settopbox,” with rule number
n
.
Up to two filtersets can be added. Your Gateway suppor ts a single LAN DHCP ser ver instance, but an
additional filterset is available for use when bridging, to block undesired DHCP traffic. Up to 8
rules
can
be created in the filterset, which are evaluated in order.
dhcp-option
determines which DHCP option should be compared. A typical value would be to use
option 60 data for comparison, but allowing this value to be configured permits more flexibility.
set dhcp filterset name “settopbox” rule 1 type dhcp-option
set dhcp filterset name "
string
" rule
n
match-action
[ pass | discard | continue ]
Assigns a match action to the filterset. If set to
pass
the
match-pool
address is shown.
set dhcp filterset name "
string
" rule
n
absent-action
[ pass | discard | continue ]
Assigns an absent action to the filterset. If set to
pass
the
absent-pool
address is shown.
set dhcp filterset name "
string
" rule
n
match-option-group "
option_group
*"
Assigns the option group named
option_group
to match.
set dhcp filterset name "
string
" rule
n
match-str "
match_string
*"
Assigns a match string to the filterset. The
match-str
string will be compared against the DHCP DIS-
COVER option data. This string can contain multiple “*” and “?” wildcard substitutions.
The star wildcard (*) has the broadest meaning of any wildcard. It can represent zero characters, a sin-
gle character or any string. The question mark (?) wildcard character represents exactly one character,
which can be any single character.
Содержание Netopia 3300
Страница 238: ...Administrator s Handbook 238 ...
Страница 254: ...Administrator s Handbook 254 Z Zero Touch 205 ...