Specifications

CLI Management Guide
TigerAccess™ EE
328 SMC7824M/VSW
To configure the automatic change from permit mode to filter mode right after the time ex-
ceeds configured time value, use the following command.
Command Mode Description
ip dhcp snooping filter-delay
timer PORTS
<1-2147483637>
Global
Configures an automatic change from bypass mode to
filter mode after filter-delay time.
1-2147483637: filter-delay time value
To configure the automatic change from bypass mode to filter mode when the numer of
filter enteries exceeds configured counter value, use the following command.
Command Mode Description
ip dhcp snooping filter-delay
counter PORTS
<1-2147483637>
Global
Configures an automatic change from bypass mode to
filter mode when the filter enteries exceed the counter.
1-2147483637: filter-delay counter value
To delete configured filter-delay timer and counter, use the following command.
Command Mode Description
no ip dhcp snooping filter-delay
PORTS
Global Deltes a configured filter-delay timer and counter.
To display the status of DHCP snooping filtering, use the following command.
Command Mode Description
show ip dhcp snooping filter Shows a DHCP snooping filter.
show ip dhcp snooping filter entry
Enable
Global
Shows DHCP snooping binding entries.
8.6.7.9 Authorized ARP
This function sets the time before ARP inspection starts to run. Before setting this, ARP
inspection should be enabled. ARP inspection checks validity of incoming ARP packets by
using DHCP snooping binding table and denies the ARP packets if they are not identified
in the table. However, this switch may be rebooted with any reason, then DHCP snooping
bindinge enries, which are dynamically learned from ARP packets back and forth switch
would be lost. Thus, ARP-inspection should be delayed to start during some time so that
DHCP snooping table can build entries. If no time given, ARP inspection sees empty
snooping table and drop every ARP packet.
To specify the ARP inspection delay time, use the following command.
Command Mode Description
ip dhcp snooping arp-inspection
start
<1-2147483637>
Configures the ARP inspection delay time. If reboot,
ARP-inspection resumes after the time you configure.
1-2147483637: delay time (unit: second)
no ip dhcp snooping arp-
inspection start
Global
Delete the configured ARP inspection delay time.