Allied Telesis AT-8600 Series How To Use Manual

TM
AlliedWare OS
Use DHCP Snooping, Option 82, and Filtering on
How To |
AT-8800, AT-8600, AT-8700XL, Rapier, and Rapier i

Series Switches

Introduction

It has increasingly become a legal requirement for service providers to identify which of their
customers were using a specific IP address at a specific time. This means that service
providers must be able to:
Know which customer was allocated an IP address at any time.
Guarantee that customers cannot avoid detection by spoofing an IP address that was not
actually allocated to them.
These security features provide a traceable history in the event of an official query. Three
components are used to provide this traceable history:
DHCP snooping
DHCP Option 82
DHCP filtering
With DHCP snooping an administrator can control port-to-IP connectivity by:
permitting port access to specified IP addresses only
permitting port access to DHCP issued IP addresses only
dictating the number of IP clients on any given port
passing location information about an IP client to the DHCP server
permitting only known IP clients to ARP
This document explains each feature and provides the minimum configuration to enable
them. There are also two configuration examples that make advanced use of the features.
C613-16086-00 REV B
www.alliedtelesis.com