R21xx-HP FlexFabric 11900 Layer 3 IP Services Command Reference

92
Default
Incoming DHCP packets on an interface are not rate limited.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
Parameters
rate: Specifies the maximum rate at which the interface can receive DHCP packets, in the range of 64 to
512 K b p s .
Usage guidelines
This command takes effect only when DHCP snooping has been enabled.
With the rate limit function, the interface discards DHCP packets that exceed the maximum rate.
If you configure this command on a Layer 2 Ethernet interface that is a member port of a Layer 2
aggregate interface, the Layer 2 Ethernet interface uses the DHCP packet maximum rate configured on
the Layer 2 aggregate interface. If the Layer 2 Ethernet interface leaves the aggregation group, it uses its
own DHCP packet maximum rate.
Examples
# Set the maximum rate at which the Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 can receive
DHCP packet to 64 Kbps.
<Sysname> system-view
[Sysname] interface Ten-GigabitEthernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dhcp snooping rate-limit 64
dhcp snooping trust
Use dhcp snooping trust to configure a port as a trusted port.
Use undo dhcp snooping trust to restore the default state of a port.
Syntax
dhcp snooping trust
undo dhcp snooping trust
Default
After you enable DHCP snooping, all ports are untrusted.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
Usage guidelines
Specify the ports facing the DHCP server as trusted ports and specify the other ports as untrusted ports
so DHCP clients can obtain valid IP addresses.