Configuring Dhcp Packet Rate Limit; Displaying And Maintaining Dhcp Snooping - H3C MSR 2600 Configuration Manual

Step
1. Enter system view.
2. Enter interface view.
3. Enable DHCP-REQUEST check.

Configuring DHCP packet rate limit

Perform this task to configure the maximum rate at which an interface can receive DHCP packets. This
feature discards exceeding DHCP packets to prevent attacks that send large numbers of DHCP packets.
To configure DHCP packet rate limit:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the maximum rate at
which the interface can receive
DHCP packets.

Displaying and maintaining DHCP snooping

Execute display commands in any view, and reset commands in user view.
Task
Display DHCP snooping entries.
Display Option 82 configuration
information on the DHCP snooping
device.
Display DHCP packet statistics on the
DHCP snooping device (MSR
2600/MSR 3600).
Display DHCP packet statistics on the
DHCP snooping device (MSR 5600).
Display information about trusted
ports.
Command
system-view
interface interface-type
interface-number
dhcp snooping check
request-message
Command
system-view
interface interface-type
interface-number
dhcp snooping rate-limit rate
Command
display dhcp snooping binding [ ip
ip-address [ vlan vlan-id ] ]
display dhcp snooping information { all |
interface interface-type interface-number }
display dhcp snooping packet statistics
display dhcp snooping packet statistics [ slot
slot-number ]
display dhcp snooping trust
75
Remarks
N/A
N/A
By default, DHCP-REQUEST
check is disabled.
You can enable DHCP-REQUEST
check only on Layer 2 Ethernet
interfaces.
Remarks
N/A
N/A
By default, incoming DHCP
packets are not rate limited.
You can configure this command
only on Layer 2 Ethernet
interfaces.
Remarks
Available in any
view.
Available in any
view.
Available in any
view.
Available in any
view.
Available in any
view.