D-Link DGS-6600-48TS Configuration Guide - Page 460

Volume 8-Security & Authentication / Chapter 43-DHCP Server Screening DHCP Server Screening/Client Filtering Configuration Commands Screening" to deny all DHCP server packets. Also, user is able to determine if device needs to send trap and log when illegal DHCP server is detected. The same illegal DHCP server IP address detected just is sent once to the trap receivers within the log ceasing unauthorized duration configured command "ip dhcp screening suppress-duration". DHCP Server Screening/Client Filtering Configuration Commands Configuring DHCP Server Screening/Client Filtering this sub-section contains the following topics: • Configuring ip dhcp screening ports • Configuring ip dhcp screening suppress-time • Configuring ip dhcp screening • Enable DHCP Server screening function on ports • Add "permit" rule to DHCP server screening • Configuring ip dhcp screening trap-log Configuring ip dhcp screening ports Command ip dhcp screening ports INTERFACE-ID [, | ] no ip dhcp screening trap-log Explanation Use this command to configure the state of the function for filtering of DHCP server packet on ports. Use the no form of this command to disable function on ports. The ip screening ports command can be used to enable per port control of the DHCP server screening function. If a port is configured to enable DHCP server screening function, it will deny all DHCP server packets (UDP source port = 67). You can add a permit binding rule by command "ip dhcp screening". The following example enable the DHCP server screening function on port eth4.1 and eth5.3: DGS-6600# configure terminal DGS-6600(config)#ip dhcp screening ports eth4.1,eth5.3 DGS-6600 Configuration Guide 460