The dhcp snooping check { dhcp-request | dhcp-chaddr | dhcp-giaddr | user-bind | mac-address } enable alarm enable command enables the DHCP packet check and alarm function.
By default, the DHCP packet check and alarm function is disabled.
dhcp snooping check { dhcp-request | dhcp-chaddr | dhcp-giaddr | user-bind | mac-address } enable alarm { dhcp-request | dhcp-chaddr | dhcp-reply | user-bind | mac-address | untrust-reply } { enable | [ enable ] threshold threshold }
| Parameter | Description | Value |
|---|---|---|
dhcp-request or user-bind |
Generates alarms when the number of DHCP packets that are discarded because they do not match the binding table reaches the threshold. |
- |
dhcp-chaddr or mac-address |
Generates alarms when the number of DHCP packets that are discarded because the CHADDR field in the packets is different from the MAC address in the frame header reaches the threshold. |
- |
dhcp-reply or untrust-reply |
Generates alarms when the number of DHCP server response packets discarded by untrusted interfaces reaches the threshold. |
- |
threshold threshold |
Specifies the alarm threshold. The device generates alarm information when the number of discarded DHCP packets reaches the threshold. |
The value is an integer that ranges from 1 to 1000. |
This command is available to aid upgrade compatibility. It can be run when it is entered in full.
This function equals to the combination of the dhcp snooping check dhcp-giaddr enable, dhcp snooping check dhcp-chaddr enable, dhcp snooping check dhcp-request enable, and dhcp snooping alarm { user-bind | mac-address | untrust-reply } threshold threshold commands.
# Enable the user-bind check function on GE0/0/1. Set the alarm threshold to 1000 for the discarded packet in the user-bind check.
<HUAWEI> system-view [HUAWEI] dhcp enable [HUAWEI] dhcp snooping enable [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] dhcp snooping enable [HUAWEI-GigabitEthernet0/0/1] dhcp snooping check user-bind enable alarm user-bind enable threshold 100