The dhcp user chasten command configures parameters for DHCP user access restriction.
The undo dhcp user chasten command restores the default parameter configuration for DHCP user access restriction.
By default, after enabling DHCP user access restriction, if the number of connection request packets from a DHCP user exceeds 10 within 180 seconds, the user is suppressed for 300 seconds.
| Parameter | Description | Value |
|---|---|---|
| check-period checkPer |
Specifies a check period. DHCP users are in the check state during this period. |
The value is an integer ranging from 1 to 3600, in seconds. The default value is 180. |
| restrain-period restrainPer |
Specifies a suppression period. DHCP users are in the suppression state during this period. |
The value is an integer ranging from 1 to 3600, in seconds. The default value is 300. |
| request-packets reqPktNum |
Specifies the maximum number of connection request packets. |
The value is an integer ranging from 1 to 10000. The default value is 10. |
Usage Scenario
If a large number of invalid connection request packets exist on a network, the network may be overloaded and even authorized users may not go online. By default, after enabling DHCP user access restriction, if the number of connection request packets from a DHCP user exceeds 10 within 180 seconds, the user is suppressed for 300 seconds. If the default parameter configuration for DHCP user access restriction does not meet service requirements, you can run the dhcp user chasten command to adjust it.