Figure 2-6 Networking Diagram For Limiting The Rate For Sending Dhcp Messages - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security

Figure 2-6 Networking diagram for limiting the rate for sending DHCP messages

DHCP client
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
Procedure
Step 1 Enable DHCP snooping.
# Enable DHCP snooping globally.
<Quidway> system-view
[Quidway] dhcp snooping enable
# Enable DHCP snooping on the interface. You can perform other DHCP snooping
configurations only after DHCP snooping is enabled on the interfaces at the DHCP server side
and user side. The configuration procedures of GE 1/0/2 and GE 2/0/1 are the same as the
configuration procedure of GE 1/0/1, and are not mentioned here.
Issue 01 (2009-07-28)
L2 network
GE1/0/2
Enable DHCP snooping globally and in the interface view.
Set the rate of sending DHCP Request messages to the protocol stack.
Configure the packet discarding alarm function.
Rate of sending DHCP Request messages
Alarm threshold
NOTE
This configuration example provides only the commands related to the DHCP snooping configuration.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Attacker
L2 network
GE1/0/1
GE2/0/1
DHCP relay
S9300
2 DHCP Snooping Configuration
L3 network
DHCP server
2-33