Tp-Link T1700G-28TQ V2 — настройка DHCP Snooping и MAC Verify на сетевых интерфейсах [94/354]

Превью страниц Страница 94 / 354

T1700G-28TQ(config)#interface gigabitEthernet 1/0/2

T1700G-28TQ(config-if)#ip dhcp snooping trust

11.9 ip dhcp snooping mac-verify

Description

The ip dhcp snooping mac-verify command is used to enable the MAC

Verify feature. To disable the MAC Verify feature, please use no ip dhcp

snooping mac-verify command. There are two fields of the DHCP packet

containing the MAC address of the Host. The MAC Verify feature is to

compare the two fields and discard the packet if the two fields are different.

Syntax

ip dhcp snooping mac-verify

no ip dhcp snooping mac-verify

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface ten-gigabitEthernet / interface range

ten-gigabitEthernet)

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Enable the MAC Verify feature for the Gigabit Ethernet port 10/2:

T1700G-28TQ(config)#interface gigabitEthernet 1/0/2

T1700G-28TQ(config-if)#ip dhcp snooping mac-verify

11.10 ip dhcp snooping limit rate

Description

The ip dhcp snooping limit rate command is used to enable the Flow Control

feature for the DHCP packets. The excessive DHCP packets will be discarded.

To restore to the default configuration, please use no ip dhcp snooping limit

rate command.