D-Link DXS-3600 Series Reference Manual page 376

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
SERVER-IP-ADDRESS
profile PROFILE-NAME
Default
None.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The DHCP server screening function is used to filter the DHCP server packets on the specific interface
and receive the trust packets from the specific source. This feature can make a protected network usable
when a malicious host sends DHCP server packets.
If the server IP address is not specified, it will enabled or disabled the DHCP server screen on the
interface. By default, the DHCP server screen is disabled on all interfaces. If enabled, the DHCP server
screen, on a specific interface, will filter all DHCP server packets from the interface and only forward
trusted server packets.
If a server screen entry is defined with a profile that contains a client MAC address, then the server
message with the server IP address and the client addresses contained in the profile is forwarded.
If an entry is defined without the client's MAC address, then the server message with the specified server
IP address will be forwarded. Each server can only have one corresponding entry in the table.
If the entry is defined with a profile but the entry does not exist, then messages with the server IP
specified by the entry are not forwarded.
Example
This example shows how to configure a DHCP server screen profile named "campus-profile" and
associate it with a DHCP server screen entry for port eth2/0/3.
Switch# configure terminal
Switch(config)# dhcp-server-screen profile campus-profile
switch(config-dhcp-server-screen)# based-on hardware-address 00-08-01-02-03-04
switch(config-dhcp-server-screen)# based-on hardware-address 00-08-01-03-00-01
switch(config-dhcp-server-screen)# exit
switch(config)# interface eth2/0/3
switch(config-if)# ip dhcp snooping server-screen 10.1.1.2 profile campus-profile
switch(config-if)#
22-21 ip dhcp snooping server-screen log-buffer
This command is used to configure the DHCP server screen log buffer parameter. Use the no form of the
command to return to the default setting.
ip dhcp snooping server-screen log-buffer entries NUMBER
no ip dhcp snooping server-screen log-buffer entries
Parameters
(Optional) Specifies the trust DHCP sever IP address.
(Optional) Specifies the profile with the client MAC address list for the
DHCP sever.
376