Huawei Quidway S9300 Configuration Manual page 151

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Step 2 Limit the rate for sending DHCP messages.
# Enable the checking of the rate of sending DHCP Request messages.
[Quidway] dhcp snooping check dhcp-rate enable
# Set the rate of sending DHCP Request messages.
[Quidway] dhcp snooping check dhcp-rate 90
Step 3 Configure the packet discarding alarm function.
# Enable the packet discarding alarm function.
[Quidway] dhcp snooping check dhcp-rate alarm enable
# Set the alarm threshold.
[Quidway] dhcp snooping check dhcp-rate alarm threshold 120
Step 4 Verify the configuration.
Run the display dhcp snooping global command on the S9300, and you can view that DHCP
snooping is enabled globally, and packet discarding alarm is enabled.
[Quidway] display dhcp snooping global
dhcp snooping enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate 90
dhcp snooping check dhcp-rate alarm enable
dhcp snooping check dhcp-rate alarm threshold 80
Dhcp snooping enable is configured at these vlan :NULL
Dhcp snooping enable is configured at these interface :
GigabitEthernet1/0/1 GigabitEthernet1/0/2
Dhcp snooping trusted is configured at these interface :NULL
Dhcp option82 insert is configured at these interface :NULL
Dhcp option82 rebuild is configured at these interface :NULL
dhcp packet drop count within alarm range : 0
dhcp packet drop count total : 0
----End
Configuration Files
#
sysname Quidway
#
dhcp enable
dhcp snooping enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate alarm enable
dhcp snooping check dhcp-rate 90
dhcp snooping check dhcp-rate alarm threshold 80
#
interface GigabitEthernet1/0/1
dhcp snooping enable
#
interface GigabitEthernet1/0/2
dhcp snooping enable
#
return
Issue 06 (2010–01–08) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
3-41