H3C Technologies H3C S5560 Series Switches - Manual (Page 91)

76
Step Command Remarks
3. Set the maximum number of
DHCP snooping entries for the
interface to learn.
dhcp snooping max-learning-num
number
By default, the number of DHCP
snooping entries for an interface to
learn is not limited.
Configuring DHCP packet rate limit
Perform this task to set the maximum rate at which an interface can receive DHCP packets. This feature
discards exceeding DHCP packets to prevent attacks that send large numbers of DHCP packets.
To configure DHCP packet rate limit:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Set the maximum rate at which
the interface can receive DHCP
packets.
dhcp snooping rate-limit rate
By default, incoming DHCP
packets are not rate limited.
You can configure this command
only on Layer 2 Ethernet
interfaces, Layer 2 aggregate
interfaces.
If you set the rate on a Layer 2
Ethernet interface that is a
member port of a Layer 2
aggregate interface, the Layer 2
Ethernet interface uses the DHCP
packet maximum rate set on the
Layer 2 aggregate interface. If
the Layer 2 Ethernet interface
leaves the aggregation group, it
uses its own DHCP packet
maximum rate.
Displaying and maintaining DHCP snooping
Task Command Remarks
Display DHCP snooping entries.
display dhcp snooping binding [ ip
ip-address [ vlan vlan-id ] ] Available in any
view.
Display Option 82 configuration
information on the DHCP snooping
device.
display dhcp snooping information { all |
interface interface-type interface-number } Available in any
view.
Display DHCP packet statistics on the
DHCP snooping device. display dhcp snooping packet statistics [ slot
slot-number ] Available in any
view.
Display information about trusted
ports.
display dhcp snooping trust
Available in any
view.