D-Link DXS-3400 User Manual - Page 339

DXS-3400 Series Lite Layer 3 Stackable 10GbE Managed Switch Web UI Reference Guide Parameter DHCP Snooping Information Option Allow Untrusted Source MAC Verification Station Move Deny Description Select to enable or disable the DHCP snooping global status. Select to enable or disable the option to globally allow DHCP packets with the relay Option 82 on the untrusted interface. Select to enable or disable the verification that the source MAC address in a DHCP packet matches the client hardware address. Select to enable or disable the DHCP snooping station move state. When DHCP snooping station move is enabled, the dynamic DHCP snooping binding entry with the same VLAN ID and MAC address on the specific port can move to another port if it detects that a new DHCP process belong to the same VLAN ID and MAC address. Click the Apply button to accept the changes made. DHCP Snooping Port Settings This window is used to display and configure the DHCP snooping port settings. To view the following window, click Security > IMPB > IPv4 > DHCPv4 Snooping >DHCP Snooping Port Settings, as shown below: Figure 9-40DHCP Snooping Port Settings Window The fields that can be configured are described below: Parameter Unit From Port ~ To Port Entry Limit Rate Limit Trusted Description Select the Switch unit that will be used for this configuration here. Select the appropriate port range used for the configuration here. Enter the entry limit value here. This value must be between 0 and 1024. Tick the No Limit option to disable the function. Enter the rate limit value here. This value must be between 1 and 300. Tick the No Limit option to disable the function. Select the trusted option here. Options to choose from are No and Yes. Ports connected to the DHCP server or to other Switches should be configured as trusted interfaces. The ports connected to DHCP clients should be configured as untrusted interfaces. DHCP snooping acts as a firewall between untrusted interfaces and DHCP servers. 329