Home » Dell Manuals » Hubs & Switches » Dell N3200-ON » Manual Viewer

Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 397

User Guidelines, ipv6 dhcp snooping log-invalid, Syntax, Default Configuration, Command Modes

Get Dell N3200-ON PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 397 highlights

User Guidelines The switch hardware rate limits DHCP packets sent to the CPU from snooping enabled interfaces to 512 Kbps. To prevent DHCP packets from being used in a DoS attack when DHCP snooping is enabled, the snooping application allows configuration of rate limiting for received DHCP packets. DHCP snooping monitors the receive rate on each interface separately. If the receive rate exceeds the configured limit within the configured interval, DHCP snooping diagnostically disables the interface. The administrator must perform the no shutdown command on the affected interface to reenable the interface. The administrator can configure the rate and burst interval. Rate limiting is configured independently on each Ethernet interface and may be enabled on both trusted and untrusted interfaces. The rate limit is configurable in the range of 0-300 packets per second and the burst interval in the range of 1-15 seconds. ipv6 dhcp snooping log-invalid Use the ipv6 dhcp snooping log-invalid command to configure the port to log invalid received DHCP messages. Syntax ipv6 dhcp snooping log-invalid no ipv6 dhcp snooping log-invalid Default Configuration By default, invalid DHCP messages are not logged. Command Modes Interface Configuration mode User Guidelines An invalid DHCP message is one that is received on an untrusted interface that is not a member of the VLAN over which the IP address (and optionally the MAC address) has been learned. Receiving large number of invalid messages may be an indication of an attack. Layer 2 Switching Commands 397

Section	Page
Dell Networking N-Series CLI Reference Guide	1
Contents	3
Dell Networking CLI	99
Introduction	99
Command Groups	99
Mode Types	105
Layer 2 Commands	108
ACL	108
MAC Address Table	109
MAC Notification	111
Auto-VoIP	111
CDP Interoperability	111
DHCP L2 Relay	112
DHCP Snooping	113
Dynamic ARP Inspection	114
Ethernet Configuration	115
Ethernet CFM	117
Ethernet Ring Protection	118
Green Ethernet	119
GVRP	120
IGMP Snooping	121
IGMP Snooping Querier	122
Interface Error Disable and Auto Recovery	122
IP Addressing	123
IPv6 ACL	124
IPv6 MLD Snooping	125
IPv6 MLD Snooping Querier	126
IP Source Guard	126
iSCSI Optimization	127
Link Dependency	127
LLDP	127
Loop Protection	129
MLAG	129
Multicast VLAN Registration	131
Port Channel	131
Port Monitor	132
QoS	133
Spanning Tree	138
UDLD	140
VLAN	141
Switchport Voice VLAN	143
Multiple MAC Registration Protocol	143
Multiple VLAN Registration Protocol	144
Security Commands	144
AAA	144
Administrative Profiles	148
E-mail Alerting	148
RADIUS	149
TACACS+	153
802.1x	154
Captive Portal	156
Denial of Service	158
Management ACL	159
Multi-factor Authentication	160
Password Management	160
SSH	162
Data Center Commands	163
OpenFlow	163
Layer 3 Routing Commands	164
ARP (IPv4)	164
BFD	165
BGP	165
BGP Routing Policy	176
DHCP Server and Relay Agent (IPv4)	177
DHCPv6	179
DHCPv6 Snooping	180
DVMRP	181
GMRP	182
IGMP	182
IGMP Proxy	183
IP Helper/DHCP Relay	184
IP Routing	185
IPv6 Routing	188
Loopback Interface	193
Multicast	193
IPv6 Multicast	196
OSPF	197
OSPFv3	202
IPv6 Policy-Based Routing	206
Router Discovery Protocol	206
Routing Information Protocol	207
Tunnel Interface	208
Unicast Reverse Path Forwarding	208
Virtual Router	209
Virtual Router Redundancy	209
Virtual Router Redundancy Protocol version 3 Commands	211
Switch Management Commands	212
Application Deployment	212
Auto-Install	213
CLI Macro	214
Clock	214
Command Line Configuration Scripting	216
DHCP Client	217
HiveAgent	218
Line	218
MACsec	219
PHY Diagnostics	221
Power Over Ethernet (PoE)	221
RMON	222
Serviceability Tracing	223
sFlow	226
SNMP	227
Support Assist	228
SYSLOG	229
System Management	230
Telnet Server	234
Time Ranges	234
USB Flash Drive	235
User Interface	235
Web Server	235
Using the CLI	239
Introduction	239
Entering and Editing CLI Commands	239
History Buffer	240
Negating Commands	241
Show Command	241
CLI Output Filtering	242
Command Completion	243
Short Form Commands	244
Keyboard Shortcuts	244
Parameters	245
Command Scripting	246
CLI Command Notation Conventions	246
Interface Naming Conventions	247
Operating on Multiple Interfaces (Ranges)	250
Examples	251
Entering Network Addresses	253
CLI Command Modes	255
User Exec Mode	256
Privileged Exec Mode	256
Global Configuration Mode	257
Pre-configuration	258
Interface Configuration Modes	259
Identifying the Switch and Command Mode from the System Prompt	260
Navigating CLI Command Modes	260
Starting the CLI	276
Using CLI Functions and Tools	276
Configuration Management	276
Management Interface Security	279
Management ACL	282
Other CLI Tools and Capabilities	282
Layer 2 Switching Commands	291
ACL Commands	293
ACL Logging	293
How to Build ACLs	294
ip access-list	296
Syntax	296
Default Configuration	296
Command Mode	296
User Guidelines	296
deny \| permit (IP ACL)	296
Syntax	297
Default Configuration	301
Command Mode	301
User Guidelines	301
Command History	303
Example	303
deny \| permit (Mac-Access-List-Configuration)	303
Syntax	303
Default Configuration	305
Command Mode	305
User Guidelines	305
Command History	306
Example	306
ip access-group	306
Syntax	306
Default Configuration	307
Command Mode	307
User Guidelines	307
Examples	307
Command History	308
mac access-group	308
Syntax	308
Default Configuration	308
Command Mode	308
User Guidelines	308
Example	309
mac access-list extended	309
Syntax	309
Default Configuration	310
Command Mode	310
User Guidelines	310
Example	310
mac access-list extended rename	310
Syntax	310
Default Configuration	310
Command Mode	310
User Guidelines	311
Example	311
remark	311
Syntax	311
Default Configuration	311
Command Mode	311
User Guidelines	312
Command History	312
Example	312
service-acl input	312
Syntax	313
Default Configuration	313
Command Mode	313
User Guidelines	313
Example	313
show service-acl interface	313
Syntax	314
Default Configuration	314
Command Mode	314
User Guidelines	314
Example	314
show access-lists interface	314
Syntax	314
Examples	315
show ip access-lists	315
Syntax	315
Command History	316
Examples	316
show mac access-lists	318
Syntax	318
Default Configuration	319
Command Mode	319
User Guidelines	319
Command History	319
Example	319
MAC Address Table Commands	321
clear mac address-table	321
Syntax	322
Default Configuration	322
Command Mode	322
User Guidelines	322
Example	322
Command History	322
mac address-table aging-time	322
Syntax	322
Default Configuration	323
Command Mode	323
User Guidelines	323
Example	323
mac address-table multicast forbidden address	323
Syntax	323
Default Configuration	324
Command Mode	324
User Guidelines	324
Examples	324
mac address-table static	324
Syntax	324
Default Configuration	325
Command Mode	325
User Guidelines	325
Example	325
switchport port-security (Global Configuration)	325
Syntax	325
Default Configuration	326
Command Mode	326
User Guidelines	326
Command History	327
Example	328
switchport port-security (Interface Configuration)	329
Syntax	329
Default Configuration	330
Command Mode	330
User Guidelines	330
Command History	333
Example	333
switchport port-security aging time	334
Syntax	334
Default Configuration	334
Command Mode	334
User Guidelines	334
Command History	334
show mac address-table	335
Syntax	335
Default Configuration	335
Command Mode	335
User Guidelines	335
Example	335
show mac address-table address	336
Syntax	336
Default Configuration	336
Command Mode	336
User Guidelines	336
Example	336
show mac address-table count	337
Syntax	337
Default Configuration	337
Command Mode	337
User Guidelines	337
Example	337
show mac address-table dynamic	337
Syntax	338
Default Configuration	338
Command Mode	338
User Guidelines	338
Example	338
show mac address-table interface	338
Syntax	339
Default Configuration	339
Command Mode	339
User Guidelines	339
Example	339
show mac address-table multicast	339
Syntax	340
Default Configuration	340
Command Mode	340
User Guidelines	340
Example	340
Command History	341
show mac address-table static	341
Syntax	341
Default Configuration	341
Command Mode	341
User Guidelines	341
Example	342
show mac address-table vlan	342
Syntax	342
Default Configuration	342
Command Mode	342
User Guidelines	342
Example	342
show port-security	343
Syntax	343
Default Configuration	343
Command Mode	343
User Guidelines	343
Command History	345
Example	345
MAC Notification Commands	346
mac address-table notification change	346
Syntax	346
Default Configuration	346
Command Mode	346
User Guidelines	346
Example	348
Command History	348
snmp trap mac-notification change	348
Syntax	348
Default Configuration	348
Command Mode	348
User Guidelines	349
Example	349
Command History	349
show mac address-table notification change	349
Syntax	349
Default Configuration	349
Command Mode	350
User Guidelines	350
Example	350
Command History	351
Auto-VoIP Commands	352
show switchport voice	352
Syntax	353
Default Configuration	353
Command Mode	353
User Guidelines	353
Examples	353
switchport voice detect auto	355
Syntax	355
Default Configuration	355
Command Mode	355
User Guidelines	355
Example	355
CDP Interoperability Commands	356
clear isdp counters	356
Syntax	356
Default Configuration	356
Command Mode	356
User Guidelines	356
Example	356
clear isdp table	356
Syntax	356
Default Configuration	357
Command Mode	357
User Guidelines	357
Example	357
isdp advertise-v2	357
Syntax	357
Default Configuration	357
Command Mode	357
User Guidelines	357
Example	357
isdp enable	358
Syntax	358
Default Configuration	358
Command Mode	358
User Guidelines	358
Example	358
isdp holdtime	358
Syntax	359
Default Configuration	359
Command Mode	359
User Guidelines	359
Example	359
isdp timer	359
Syntax	359
Default Configuration	360
Command Mode	360
User Guidelines	360
Example	360
show isdp	360
Syntax	360
Default Configuration	360
Command Mode	360
User Guidelines	360
Example	360
show isdp entry	361
Syntax	361
Default Configuration	361
Command Mode	361
User Guidelines	361
Example	361
show isdp interface	362
Syntax	362
Default Configuration	362
Command Mode	362
User Guidelines	362
Example	362
show isdp neighbors	363
Syntax	363
Default Configuration	363
Command Mode	363
User Guidelines	363
Example	363
show isdp traffic	364
Syntax	364
Default Configuration	364
Command Mode	364
User Guidelines	364
Example	364
DHCP Layer 2 Relay Commands	366
dhcp l2relay (Global Configuration)	366
Syntax	366
Default Configuration	366
Command Mode	366
User Guidelines	366
Example	367
dhcp l2relay (Interface Configuration)	367
Syntax	367
Default Configuration	367
Command Mode	367
User Guidelines	367
Example	367
dhcp l2relay circuit-id	367
Syntax	367
Default Configuration	368
Command Mode	368
User Guidelines	368
Example	368
dhcp l2relay remote-id	368
Syntax	368
Default Configuration	368
Command Mode	369
User Guidelines	369
Example	369
dhcp l2relay trust	369
Syntax	369
Default Configuration	369
Configuration Mode	369
User Guidelines	369
Example	369
dhcp l2relay vlan	369
Syntax	370
Default Configuration	370
Command Mode	370
User Guidelines	370
Example	370
show dhcp l2relay all	370
Syntax	370
Default Configuration	370
Command Mode	370
User Guidelines	371
Example	371
show dhcp l2relay interface	371
Syntax	371
Default Configuration	371
Command Mode	371
User Guidelines	372
Command History	372
Example	372
show dhcp l2relay stats interface	372
Syntax	372
Default Configuration	372
Command Mode	372
User Guidelines	372
Example	372
show dhcp l2relay agent-option vlan	373
Syntax	373
Default Configuration	373
Command Mode	373
User Guidelines	373
Example	373
show dhcp l2relay vlan	374
Syntax	374
Default Configuration	374
Command Mode	374
User Guidelines	374
Example	374
show dhcp l2relay circuit-id vlan	374
Syntax	374
Default Configuration	375
Command Mode	375
User Guidelines	375
Example	375