Ip Helper Dhcp-Snooping Port Ip-Source-Filtering - Alcatel-Lucent OmniSwitch 6850-48 Cli Reference Manual

ip helper dhcp-snooping port ip-source-filtering

Configures the IP source filtering status for the port. When this function is enabled, traffic on the port is
restricted to packets received on the port that contain the client MAC address and IP address. All other
packets are dropped.
ip helper dhcp-snooping port slot1/port1[-port1a] ip-source-filtering {enable | disable}
Syntax Definitions
slot1/port1[-port1a]
enable
disable
Defaults
By default, IP source filtering is disabled for the port.
Platforms Supported
OmniSwitch 6400, 6850,6850E, 6855, 9000E
Usage Guidelines
•
IP source filtering applies only to ports that are associated with a VLAN that has DHCP Snooping
enabled or to all ports when DHCP Snooping is globally enabled for the switch.
•
The DHCP Snooping binding table is used to verify client information.
•
If a device connected to a DHCP Snooping port with IP source filtering enabled does not have a valid
IP address lease from the trusted DHCP server, then all IP traffic for that device is blocked on the port.
•
Disable IP source filtering for the DHCP Snooping port to allow a device to obtain a valid IP address
lease.
•
Once a device obtains a valid lease or if a device already has a valid lease, then only source bound traf-
fic is allowed.
Examples
-> ip helper dhcp-snooping port 1/24 ip-source-filtering enable
-> ip helper dhcp-snooping port 2/1-10 ip-source-filtering enable
-> ip helper dhcp-snooping port 4/8 ip-source-filtering disable
-> ip helper dhcp-snooping port 3/1-5 ip-source-filtering disable
Release History
Release 6.1.2; command was introduced.
Release 6.4.4; ip-source-filtering parameter deprecated, use
page 20-42
Specifies the slot number for the module and the physical port number
on that module (e.g. 3/1 specifies port 1 on slot 3). Use a hyphen to
specify a range of ports (e.g. 3/1-16).
Enables IP source filtering for the specified port.
Disables IP source filtering for the specified port.
DHCP Relay Commands
ip helper dhcp-snooping
OmniSwitch CLI Reference Guide
ip-source-filter.
June 2012