Rate Limit Configuration Example - H3C S5600 Series Operation Manual

Operation Manual – DHCP
H3C S5600 Series Ethernet Switches

5.3 Rate Limit Configuration Example

I. Network requirements
As shown in
DHCP server. GigabitEthernet 1/0/2 is connected to client B and GigabitEthernet 1/0/11
is connected to client A.
Enable DHCP snooping on the switch, and specify GigabitEthernet 1/0/1 as the
DHCP snooping trusted port.
Configure DHCP packet rate limit on GigabitEthernet 1/0/11 and set the maximum
DHCP packet rate allowed on the port to 100 pps.
Set the port state auto-recovery interval to 30 seconds on the switch.
II. Networking diagram
GE1/0/11
ClientA
Figure 5-1 Network diagram for DHCP packet rate limit configuration
III. Configuration procedure
# Enable DHCP snooping on the switch.
<Switch> system-view
[Switch] dhcp-snooping
# Specify GigabitEthernet 1/0/1 as the trusted port.
[Switch] interface GigabitEthernet1/0/1
[Switch-GigabitEthernet1/0/1] dhcp-snooping trust
[Switch-GigabitEthernet1/0/1] quit
# Enable auto recovery.
[Sysname] dhcp protective-down recover enable
# Set the port state auto-recovery interval to 30 seconds.
[Sysname] dhcp protective-down recover interval 30
# Enter port view.
Figure 5-1, GigabitEthernet 1/0/1 of the S5600 switch is connected to the
DHCP server
GE1/0/1
DHCP snooping
GE1/0/2
ClientB
Chapter 5 DHCP Packet Rate Limit Configuration
5-3