Enterasys Enterasys SecureStack B2 B2G124-24 Dokumentacja Strona 500

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 600
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 499
set dhcpsnooping verify
18-8 DHCP Snooping and Dynamic ARP Inspection
Usage
WhenenabledgloballyandonVLANs,DHCPsnoopingbuildsitsbindingsdatabasefromDHCP
clientmessagesreceivedonuntrustedports.Suchentriesinthedatabasearedynamicentries
whichwillberemovedinresponsetovalidDECLINE,RELEASE,andNACKmessagesorwhen
theabsoluteleasetimeoftheentryexpires.
Youcanaddstaticentriestothebindingsdatabasewiththiscommand.
Example
Thisexamplecreatesastaticentry,associatingMACaddress00:01:02:33:44:55withIPaddress
192.168.10.10andVLAN10,portge.1.1.
B2
(rw)->set dhcpsnooping binding 00:01:02:33:44:55 vlan 10 192.168.10.10 port
ge.1.1
set dhcpsnooping verify
UsethiscommandtoenableordisableDHCPsnoopingtofilteronsourceMACaddress.
Syntax
set dhcpsnooping verify mac-address {enable | disable}
Parameters
Defaults
SourceMACaddressverificationisenabledbydefault.
Mode
Switchcommand,readwrite.
Usage
Whenthisverificationisenabled,theDHCPsnoopingapplicationcomparesthesourceMAC
addresscontainedinvalidclientmessageswiththeclient’shardwareaddress.Ifthereisa
mismatch,DHCPsnoopinglogstheeventanddropsthepacket.
Usetheshow dhcpsnoopingcommandtodisplaythestatus(enabledordisabled)of
sourceMAC
addressverificationforeachinterfaceinanenabledVLAN.Theshow dhcpsnoopingstatistics
commandshowstheactualnumberofMACverificationerrorsthatoccurredonuntrustedports.
Example
ThisexampledisablessourceMACaddressverificationandlogging.
B2
(rw)->set dhcpsnooping verify mac-address disable
enable EnablesverificationofthesourceMACaddressinclientmessages
againsttheclienthardwareaddress.
disable DisablesverificationofthesourceMACaddressinclientmessages
againsttheclienthardwareaddress.
Przeglądanie stron 499
1 2 ... 495 496 497 498 499 500 501 502 503 504 505 ... 599 600

Komentarze do niniejszej Instrukcji

Brak uwag