Configuring Dhcp Packet Rate Limit; Displaying And Maintaining Dhcp Snooping - HP 5920 Series Configuration Manual

Step
1. Enter system view.
2. Enter interface view.
3. Enable DHCP-REQUEST check.

Configuring DHCP packet rate limit

Perform this task to configure the maximum rate at which an interface can receive DHCP packets. This
feature discards exceeding DHCP packets to prevent attacks that send large numbers of DHCP packets.
To configure DHCP packet rate limit:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the maximum rate at
which the interface can receive
DHCP packets.

Displaying and maintaining DHCP snooping

Execute display commands in any view, and reset commands in user view.
Task
Display DHCP snooping entries.
Display Option 82 configuration
information on the DHCP snooping
device.
Display DHCP packet statistics on the
DHCP snooping device.
Command
system-view
interface interface-type
interface-number
dhcp snooping check
request-message
Command
system-view
interface interface-type
interface-number
dhcp snooping rate-limit rate
Command
display dhcp snooping binding [ ip
ip-address [ vlan vlan-id ] ]
display dhcp snooping information { all |
interface interface-type interface-number }
display dhcp snooping packet statistics
[ slot slot-number ]
67
Remarks
N/A
N/A
By default, DHCP-REQUEST check is
disabled.
You can enable DHCP-REQUEST
check only on Ethernet interfaces,
S-channel interfaces, VSIs, and
aggregate interfaces.
Remarks
N/A
N/A
By default, incoming DHCP
packets are not rate limited.
You can configure this command
only on Ethernet interfaces,
S-channel interfaces, VSIs, and
aggregate interfaces.
If an Ethernet interface belongs to
an aggregation group, it uses the
DHCP packet maximum rate
configured on the corresponding
aggregate interface.
Remarks
Available in any view.
Available in any view.
Available in any view.