TP-Link T1600G-18TS Configuration Manual page 580

Configuring Network Security
Step 5
Step 6
Step 7
Step 8
Step 9
The following example shows how to configure port 1/0/1 as a trusted port, enable the
MAC verify feature, and set the limit rate as 10 pps and decline rate as 20 pps on this port:
Switch#configure
Switch(config)#interface gigabitEthernet 1/0/1
Switch(config-if)#ip dhcp snooping trust
Switch(config-if)#ip dhcp snooping mac-verify
Switch(config-if)#ip dhcp snooping limit rate 10
Switch(config-if)#ip dhcp snooping decline rate 20
Switch(config-if)#show ip dhcp snooping interface gigabitEthernet 1/0/1
Interface Trusted
--------- -------
Gi1/0/1 Enable
Switch(config-if)#end
Switch#copy running-config startup-config
ip dhcp snooping limit rate value
Enable the limit rate feature and specify the maximum number of DHCP messages that can
be forwarded on the port per second. The excessive DHCP packets will be discarded.
Specify the limit rate value. The following options are provided: 0, 5,10,15,20,25 and
value:
30 (packets/second). The default value is 0, which indicates disabling limit rate.
ip dhcp snooping decline rate value
Enable the decline protect feature and specify the maximum number of Decline packets
can be forwarded per second on the port. The excessive DHCP Decline packets will be
discarded.
Specify the limit rate value of Decline packets. The following options are provided: 0,
value:
5,10,15,20,25 and 30 (packets/second). The default value is 0, which indicates disabling this
feature.
show ip dhcp snooping interface [ gigabitEthernet port | port-channel port-channel-id ]
Verify the DHCP Snooping configuration of the port.
end
Return to privileged EXEC mode.
copy running-config startup-config
Save the settings in the configuration file.
MAC-Verify
----------
Enable
Limit-Rate Dec-rate
---------- --------
10 20
DHCP Snooping Configuration
LAG
---
N/A
Configuration Guide 557