Huawei S1700 Series Web User Manual page 162

S1700 Managed Series Ethernet Switches
Web User Manual
Table 9-26 Parameters of Interface Parameter Settings
Item
Query
Interface Name
Packet Limit
Maximum Threshold
Renewal Check
Renewal Alarm
Alarm Threshold
Chaddr Check
Chaddr Alarm
Alarm Threshold
Configure DHCP Snooping Parameter for Interface.
Step 1 Click Security> DHCP Snooping.
Step 2 Click Interface Parameter Settings in Tab.
Step 3 Click the checkbox on the left side of DHCP Snooping parameter interface to be configured,
and then click Configure button, the configuration page is displayed as follows.
Figure 9-39 Configure Interface Parameter
Step 4 Configure the needed Parameter.
Issue 05 (2012-10-25)
Description
Search the parameter settings of specified interface in Interface
Name.
Interface Number.
Prevent a large number of DHCP Request packets sent by attackers
to attack switch.
Maximum threshold value received.
Avoid attacking DHCP Server through fake DHCP renewal packet
sent by attacker.
Give an alarm when the received DHCP renewal message exceeds
alarm threshold.
The maximum threshold value of received renewal packets.
Avoid attacking DHCP Server by changing the CHADDR value.
Give an alarm when the received CHADDR value exceeds alarm
threshold value.
The maximum threshold value where the message can be changed
by received CHADDR value.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
152