Ip Dhcp Screening - D-Link DGS-6600-48T Cli Reference Manual

DGS-6604

ip dhcp screening

ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-ID [,
| - ]
no ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-
ID [, | - ]
Syntax Description
IP-ADDRESS
client-mac MAC-
ADDRESS
INTERFACE-ID [, | - ]
Default
Command Mode
Usage Guideline
Example
switch#configure terminal
switch(config)#ip dhcp screening server-ip 10.1.1.1 client-mac 00-08-01-02-
03-04 ports eth4.1-4.34
CLI Reference Guide
Use this command to add/delete the DHCP server/client binding entry.
DHCP server IP address.
(Optional) Client MAC address to be associated with a server IP address. It
represents "All Client MAC" if not specified.
The interface should be a physical port or port channel which will be applied.
Specify a series of interfaces, or separate a range of interfaces from a previous
range. No space before and after the comma.
Specifies a range of interfaces. No space before and after the hyphen.
Not configured
Global configuration mode
This command is used to specify explicit "permit" rules for the 3-tuple (DHCP
server IP, client's MAC, port list from which DHCP server is allowed come) to
allow DHCP server packets. DHCP server packets except those met explicated
configured met the server IP /.client MAC binding will be filtered on specified
ports. If client MAC address is not specified, then DHCP server packets will pass
as long as .the server IP matches.
Note: The user needs turn on the port's "DHCP Server Screening" to make all
DHCP server packets are denied by default by command: "ip dhcp screening
ports". If a port's "DHCP Server Screening" doesn't turn on, the "permit" rule is
not effective
The following example configures a permit rule to allow DHCP server packet with
souce IP address 10.1.1.1 and client MAC address 00-08-01-02-03-04 on
eth4.1-4.34
ip dhcp screening
221