Ip bootp-use-intf-ip, Whitelist, Ip bootp-use-intf-ip whitelist – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual
Page 382
ip bootp-use-intf-ip
Configures the source IP address of a DHCP-client packet in a DHCP relay agent.
Configures a DHCP relay agent to set the source IP address of a DHCP-client packet with the IP
address of the interface in which the DHCP-client packet is received. The no form of the command
reverts the FastIron device to the default behaviour where the DHCP relay agent sets the source IP
address of a DHCP-client packet with the IP address of the outgoing interface to the DHCP server.
Syntax
ip bootp-use-intf-ip
no ip bootp-use-intf-ip
Command Default
The DHCP relay agent sets the source IP address of a DHCP-client packet with the IP address of the
outgoing interface to the DHCP server.
Modes
Global configuration mode
Usage Guidelines
You can configure ACLs on a DHCP server to permit or block access to the DHCP server from
particular subnets or networks. You can then use this command on the DHCP relay agent to reveal the
source subnet or network of a DHCP packet to the DHCP server, which enables the DHCP server to
process or discard the DHCP traffic according to the configured ACLs.
Examples
The following example shows a FastIron DHCP relay agent set to configure the source IP address of a
DHCP-client packet with the IP address of the interface on which the DHCP-client packet is received.
Brocade (config)# ip bootp-use-intf-ip
History
Release version
Command history
Pre-07.3.00
This command was introduced.
whitelist
Configures an RA guard whitelist to be used with the RA guard policy. The no form of the command
removes the whitelist from the RA guard policy.
Syntax
whitelist number
no whitelist number
Parameters
number
ID number of the RA guard whitelist to be associated with the RA guard policy. Valid range
is from 1 to 64.
Modes
RA guard policy configuration
Usage Guidelines
You must specify an RA guard whitelist ID number configured using the ipv6 raguard whitelist
command. The RA guard policy uses the given RA guard whitelist for allowing RAs. Only RAs from
sources whose IP addresses are added to the RA guard whitelist are forwarded. You can configure only
one RA guard whitelist with an RA guard policy. The latest RA guard whitelist association always takes
precedence as the one associated with the RA guard policy.
ip bootp-use-intf-ip
382
FastIron Ethernet Switch Security Configuration Guide
53-1003088-03