Chapter 24 Dhcp Server Screening Commands - D-Link xStack DGS-3620 Reference Manual

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
Chapter 24
Screening Commands
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist> |
all] | ports [<portlist> | all] state [enable | disable] | illegal_server_log_suppress_duration [1min
| 5min | 30min]]
config filter dhcp_server log [enable | disable]
config filter dhcp_server trap [enable | disable]
show filter dhcp_server
create filter dhcpv6_server permit sip <ipv6addr> ports [<portlist> | all]
config filter dhcpv6_server log [enable | disable]
config filter dhcpv6_server ports [<portlist> | all] state [enable | disable]
config filter dhcpv6_server trap [enable | disable]
show filter dhcpv6_server
delete filter dhcpv6_server permit sip <ipv6addr>
create filter icmpv6_ra_all_node permit sip <ipv6addr> ports [<portlist> | all]
config filter icmpv6_ra_all_node log [enable | disable]
config filter icmpv6_ra_all_node ports [<portlist> | all] state [enable | disable]
config filter icmpv6_ra_all_node trap [enable | disable]
show filter icmpv6_ra_all_node
delete filter icmpv6_ra_all_node permit sip <ipv6addr>
24-1 config filter dhcp_server
Description
This command has two purposes: to specify to filter all DHCP server packets on the specific port
and to specify to allow some DHCP server packets with pre-defined server IP addresses and client
MAC addresses. With this function, we can restrict the DHCP server to service specific DHCP
clients. This is useful when two DHCP servers are present on the network; one of them can
provide the private IP address and the other can provide the public IP address.
Enabling filter DHCP server port state will create one access profile and create one access rule
per port (UDP port = 67). Filter commands in this file will share the same access profile. Addition of
a permit DHCP entry will create one access profile and create one access rule. Filter commands in
this file will share the same access profile.
Format
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist>
| all] | ports [<portlist> | all] state [enable | disable] | illegal_server_log_suppress_duration
[1min | 5min | 30min]]
Parameters
add permit server_ip - Specifies the IP address of the DHCP server to be permitted.
<ipaddr> - Enter the IP address.
client_mac - (Optional) Specifies the MAC address of the DHCP client.
DHCP Server
413