Configuring The Packet Discarding Alarm Function - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
By default, the S9300 does not check DHCP messages.
----End

2.7.4 Configuring the Packet Discarding Alarm Function

Context
The packet discarding alarm function can be configured globally and on the interface.
l
l
Procedure
l
l
Issue 01 (2009-07-28)
the message. If the MAC address is different from of the value of the CHADDR field, the
DHCP Request message is discarded.
After you run the user-bind command, the S9300 checks whether the DHCP Request or
Release message matches the binding table; the unmatched message is discarded.
The packet discarding alarm function configured globally takes effect for all interfaces.
The packet discarding alarm function configured on an interface takes effect for a specified
interface. If the packet discarding alarm function is not configured on an interface, the
global configuration is used.
NOTE
If you need to configure the alarm function for the DHCP messages that are discarded because they exceed
the transmission rate, see
Configuring the packet discarding alarm function globally
1. Run:
system-view
The system view is displayed.
2. Run:
dhcp snooping alarm threshold threshold
The alarm threshold of the number of globally discarded packets is set.
By default, the global alarm threshold of the number of discarded DHCP messages is
100 pps.
Configuring the packet discarding alarm function on an interface
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
dhcp snooping alarm { mac-address | user-bind | untrust-reply } enable
The packet discarding alarm function is enabled on the interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2.6.3 Limiting the Rate of Sending DHCP
2 DHCP Snooping Configuration
Messages.
2-21