dhcp flood-protection enable

Use dhcp flood-protection enable to enable DHCP flood attack protection.

Use undo dhcp flood-protection enable to disable DHCP flood attack protection.

Syntax

dhcp flood-protection enable

undo dhcp flood-protection enable

Default

DHCP flood attack protection is disabled.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When the DHCP server receives a DHCP packet from a client (MAC address), it creates a DHCP flood attack entry in check state. If the number of DHCP packets from the same MAC address exceeds the upper limit in the detection duration, the server determines that the client is launching a DHCP flood attack. The DHCP flood attack entry changes to the restrain state, and the DHCP server discards the DHCP packets from that client.

Examples

# Enable DHCP flood attack protection in the VSI vpna.

<Sysname> system-view
[Sysname] vsi vpna
[Sysname-vsi-vpna] dhcp flood-protection enable

Related commands

dhcp flood-protection threshold

dhcp flood-protection aging-time