D-Link DGS-3700 Series Reference Manual page 184

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
config filter dhcp_server
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To add an entry from the DHCP server/client filter list in the switch's database:
DGS-3700-12:5#config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-00-
00-00-00-01 port 1-12
Command: config filter dhcp_server add permit server_ip 10.1.1.1 client_mac 00-00-00-
00-00-01 port 1-12
Success
DGS-3700-12:5#
To configure the DHCP filter state:
DHCP server packets except those that have been server IP/client MAC bound will be
filtered. This command is used to configure the state of the function for filtering of
DHCP server packet and to add/delete the DHCP server/client binding entry.
config filter dhcp_server [add permit server_ip <ipaddr> {client_mac
<macaddr>} ports [<portlist> | all] | delete permit server_ip <ipaddr>
{client_mac <macaddr>} ports [<portlist> | all] | ports [<portlist> | all] state
[enable | disable] | illegal_server_log_suppress_duration [1min | 5min | 30min]
| trap_log [enable | disable] ]
This command has two purposes: to filter all DHCP server packets on the specified
port(s) and to allow some DHCP server packets to be forwarded if they are on the
pre-defined server IP address/client MAC address binding list. Thus the DHCP
server can be restricted to service a specified DHCP client. This is useful when
there are two or more DHCP servers present on a network.
add permit server_ip - Specify the IP address of the DHCP server
client_mac - Specify the MAC address of the DHCP client.
ports - See Below:
<portlist> - Specify the range of ports to be configured.
all - Specify to configure all ports.
delete permit server_ip - Delete permit server IP address.
state - See Below:
enable - Enable the state.
disable - Disable the state.
illegal_server_log_suppress_duration - See Below:
1min - Specify an illegal server log suppression duration of 1 minute.
5min - Specify an illegal server log suppression duration of 5 minutes.
30min - Specify an illegal server log suppression duration of 30 minutes.
trap_log - See Below:
enable - Enable the trap log feature.
disable - Disable the trap log feature.
Only Administrator-level users can issue this command.
Enabling the DHCP filter will create one access profile and create one deny rule per
port (UDP port 67).
Addition of a DHCP filter permit entry will create one access profile and create one
permit rule (DA = client MAC address, SA = source IP address and UDP port 67).
Page | 184