Install guide

Software Version 2.9.1 53
Software Version 2.9.1
C613-10486-00 REV C
disable dhcpsnooping strictunicast
Syntax DISable DHCPSnooping STRictunicast
Description This new command disables strict unicast filtering on DHCP snooping clients.
To use this command, DHCP snooping must be disabled.
On AT-8600, AT-8700XL, AT-8800, and Rapier Series switches, this restarts
normal forwarding of multicast and broadcast packets sent by clients to
devices further upstream.
On AT-8948, x900-48, and AT-9900 Series switches, this restarts normal
forwarding of IGMP packets sent by clients to devices further upstream. To
fully disable strict unicast filtering, you must disable any configured QoS and
classifiers dealing with IGMP packets that are attached to the untrusted ports.
Example To disable strict unicast filtering on DHCP snooping clients, use the command:
dis dhcps str
enable dhcpsnooping strictunicast
Syntax ENable DHCPSnooping STRictunicast
Description This new command enables strict unicast filtering on DHCP snooping clients.
To use this command, DHCP snooping must be disabled.
When enabled on AT-8600, AT-8700XL, AT-8800, and Rapier Series switches,
the switch drops multicast and broadcast packets sent from a client, except for:
■ ARP packets
■ IGMP Replies and IGMP Leaves packets, when IGMP snooping is enabled
■ DHCP packets, when DHCP snooping is enabled
This ensures a client cannot flood other network devices using broadcast or
multicast packets.
When enabled on AT-8948, x900-48, and AT-9900 Series switches, the switch
drops IGMP packets, except for IGMP Replies and IGMP Leaves when IGMP
snooping is enabled.
This ensures that a client cannot flood network devices using IGMP queries.
Use this command in conjunction with QoS and Classifiers commands. To stop
other broadcast and multicast packets, you must configure QoS using the
create qos policy command, and classifiers using the create classifier
command.
Example To enable strict unicast filtering on DHCP snooping clients, use the command:
en dhcps str