Filter (Dhcp Server/Netbios) Commands - D-Link DGS-3700 Series Reference Manual

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
F (DHCP S
ILTER
Back to Section Header
DHCP Server Screening Settings
This function allows you not only to restrict all DHCP Server packets but also to receive any specified
DHCP server packets by any specified DHCP client, it is useful when one or more than one DHCP servers
are present on the network and both provide DHCP services to different distinct groups of clients. Enabling
the DHCP filter for the first time will create both an access profile and deny rule per port, following this
other access rules can be created. These rules are used to block all DHCP server packets. Similarly, the
addition of a permit DHCP entry will create one permit rule in the access profile at the first time the DHCP
client MAC address is the client MAC address, and the Source IP address is the same as the DHCP server's
IP address (UDP port number 67). These rules are used to permit the DHCP server packets with specific
fileds, which the user configures.
When the DHCP Server filter function is enabled, all DHCP Server packets will be filtered from a specific
port. Also, you are allowed to create entries for specific port-based Server IP address and Client MAC
address binding entries. Be aware that the DHCP Server filter function must be enabled first. Once all
settings are complete, all DHCP Server packets will be filtered from a specific port except those that meet
the Server IP Address and Client MAC Address binding.
NetBIOS Filtering Setting
When the NetBIOS filter is enabled, all NetBIOS packets will be filtered from the specified port. Enabling
the NetBIOS filter will create one access profile and create three access rules per port (UDP port numbers
137 and 138 and TCP port number 139).
For Extensive NetBIOS Filter, when it is enabled, all NetBIOS packets over 802.3 frames will be filtered
from the specified port. This command is used to configure the state of the NetBIOS filter. Enabling the
Extensive NetBIOS filter will create one access profile and create one access rule per port (DSAP
(Destination Service Access Point) =F0, and SASP (Source Service Access Point) =F0).
The DHCP Server/NetBIOS Filter commands in the Command Line Interface (CLI) are listed (along with
the appropriate parameters) in the following table.
C
OMMAND
config filter dhcp_server
show filter dhcp_server
config filter netbios
show filter netbios
config filter
extensive_netbios
show filter
extensive_netbios
Each command is listed, in detail, in the following sections.
/N BIOS) C
ERVER ET
P
ARAMETERS
[add permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist> |
all] | delete permit server_ip <ipaddr> {client_mac <macaddr>} ports
[<portlist> | all] | ports [<portlist> | all] state [enable | disable] |
illegal_server_log_suppress_duration [1min | 5min | 30min] | trap_log
[enable | disable] ]
[<portlist> | all] state [enable|disable]
[<portlist> | all] state [enable|disable]
Page | 183
OMMANDS