Checking The Configuration - Huawei Quidway S9300 Configuration Manual

2 DHCP Snooping Configuration
----End

2.7.5 Checking the Configuration

Prerequisite
The configurations of the packet discarding alarm function are complete.
Procedure
l
l
----End
Example
Run the display dhcp snooping global command, and you can view that global DHCP snooping
is enabled.
<Quidway> display dhcp snooping global
dhcp snooping enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate alarm threshold 200
Run the display dhcp snooping interface interface-type interface-number command, and you
can view information about DHCP snooping on the interface.
<Quidway> display dhcp snooping interface gigabitethernet 1/0/0
dhcp snooping enable
dhcp snooping alarm untrust-reply enable
dhcp snooping alarm untrust-reply threshold 90
dhcp snooping alarm mac-address enable
dhcp snooping alarm mac-address threshold 90
dhcp snooping alarm user-bind enable
dhcp snooping alarm user-bind threshold 90
user-bind total
2-22
mac-address: If the MAC address in the packet header is different from the MAC
–
address of the DHCP message, the message is discarded.
user-bind: If the DHCP message does not match the binding table, the message
–
is discarded. The DHCP message refers to the DHCP Request message except for
the Discover message.
untrust-reply: If an untrusted interface receives a Reply message sent by the
–
DHCP server, the message is discarded.
By default, the packet discarding alarm function is disabled on an interface.
4. Run:
dhcp snooping alarm { mac-address | user-bind | untrust-reply } threshold
threshold
The alarm threshold of the number of discarded packets is set on the interface.
By default, an interface uses the threshold set in the dhcp snooping alarm
threshold command. If the command is not run in the system view, the interface uses
the default threshold, 100 pps.
Run the display dhcp snooping global command to check information about global DHCP
snooping.
Run the display dhcp snooping interface interface-type interface-number command to
check information about DHCP snooping on the interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
0
Configuration Guide - Security
Issue 01 (2009-07-28)