D-Link DGS-6600-48T Product Manual - Page 231

DGS-6604 ip dhcp screening ip dhcp screening Use this command to add/delete the DHCP server/client binding entry. ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-ID [, | - ] no ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACEID [, | - ] Syntax Description IP-ADDRESS DHCP server IP address. client-mac MACADDRESS (Optional) Client MAC address to be associated with a server IP address. It represents "All Client MAC" if not specified. INTERFACE-ID [, | - ] The interface should be a physical port or port channel which will be applied. Specify a series of interfaces, or separate a range of interfaces from a previous range. No space before and after the comma. Specifies a range of interfaces. No space before and after the hyphen. Default Command Mode Usage Guideline Example Not configured Global configuration mode This command is used to specify explicit "permit" rules for the 3-tuple (DHCP server IP, client's MAC, port list from which DHCP server is allowed come) to allow DHCP server packets. DHCP server packets except those met explicated configured met the server IP /.client MAC binding will be filtered on specified ports. If client MAC address is not specified, then DHCP server packets will pass as long as .the server IP matches. Note: The user needs turn on the port's "DHCP Server Screening" to make all DHCP server packets are denied by default by command: "ip dhcp screening ports". If a port's "DHCP Server Screening" doesn't turn on, the "permit" rule is not effective The following example configures a permit rule to allow DHCP server packet with souce IP address 10.1.1.1 and client MAC address 00-08-01-02-03-04 on eth4.1-4.34 switch#configure terminal switch(config)#ip dhcp screening server-ip 10.1.1.1 client-mac 00-08-01-0203-04 ports eth4.1-4.34 CLI Reference Guide 221