Show Dhcpsnooping - Enterasys C3G124-24 Configuration Manual

Parameters
port-string
none
rate pps
burst interval secs
Defaults
Rate = 15 packets per second
Burst Interval = 1 second
Mode
Switch command, read-write.
Usage
To protect the switch from DHCP attacks when DHCP snooping is enabled, the snooping
application enforces a rate limit for DHCP packets received on untrusted interfaces. DHCP
snooping monitors the receive rate on each interface separately. If the receive rate exceeds the
configured limit, DHCP snooping brings down the interface. You can re-enable the interface with
the set port enable command. Both the rate and the burst interval can be configured.
You can display the currently configured rate limit parameters with the show dhcpsnooping port
command.
Example
This example configures rate limit parameters on port ge.1.1.
C3(rw)->set dhcpsnooping limit ge.1.1 rate 20 burst interval 2
C3(rw)->show dhcpsnooping port ge.1.1
Interface
----------
ge.1.1

show dhcpsnooping

Use this command to display DHCP snooping configuration parameters.
Syntax
show dhcpsnooping
Parameters
None.
Specifies the port or ports to which to apply these rate limiting
parameters.
Configures no limit on incoming DHCP packets.
Specifies a rate limit in packets per second. The value of pps can range
from 0 to 100 packets per second.
Specifies a burst interval in seconds. The value of secs can range from 1
to 15 seconds.
Trust State Rate Limit
------------- -------------
No
Burst Interval
(pps) (seconds)
---------------
20
show dhcpsnooping
2
Enterasys C3 Configuration Guide 23-9