H3C S5600 Series Operation Manual page 732

Networking diagram
Figure 5-1 Network diagram for DHCP packet rate limit configuration
DHCP server
GE1/0/1
DHCP snooping
GE1/0/11
ClientA
Configuration procedure
# Enable DHCP snooping on the switch.
<Switch> system-view
[Switch] dhcp-snooping
# Specify GigabitEthernet 1/0/1 as the trusted port.
[Switch] interface GigabitEthernet 1/0/1
[Switch-GigabitEthernet1/0/1] dhcp-snooping trust
[Switch-GigabitEthernet1/0/1] quit
# Enable auto recovery.
[Sysname] dhcp protective-down recover enable
# Set the port state auto-recovery interval to 30 seconds.
[Sysname] dhcp protective-down recover interval 30
# Enter port view.
[Sysname] interface GigabitEthernet 1/0/11
# Enable DHCP packet rate limit on GigabitEthernet 1/0/11.
[Sysname-GigabitEthernet1/0/11] dhcp rate-limit enable
# Set the maximum DHCP packet rate allowed on GigabitEthernet 1/0/11 to 100 pps.
[Sysname-GigabitEthernet1/0/11] dhcp rate-limit 100
GE1/0/2
ClientB
5-3