Motorola 7000, 3352N, 3342, 2200 manual Set dhcp filterset name string rule n dhcp-option 0, 252

Administrator’s Handbook

DHCP Option Filtering

Beginning with Firmware Version 7.7, support for DHCP option filtering is provided via the filterset settings.

set dhcp filterset name "string" rule n type [ dhcp-option hw-address requested-option ]

Specifies a DHCP filterset named string as one of three possible types:

The rule can either specify an option and option contents, dhcp-option; a client hardware address range, hw-address; or an option the client is requesting, requested-option. For hw-address, you will need to enter start-addressand end-addressvalues; for the others a dhcp-optionparameter must be set.

By default a rule is of type dhcp-option, for backwards compatibility.

set dhcp filterset name "string" rule n dhcp-option [ 0... 255 ]

Creates a DHCP filterset named string, for example “settopbox,” with rule number n.

Up to two filtersets can be added. Your Gateway supports a single LAN DHCP server instance, but an addi- tional filterset is available for use when bridging, to block undesired DHCP traffic. Up to 8 rules can be cre- ated in the filterset, which are evaluated in order.

dhcp-optiondetermines which DHCP option should be compared. A typical value would be to use option 60 data for comparison, but allowing this value to be configured permits more flexibility.

set dhcp filterset name "settopbox" rule 1 type dhcp-option

set dhcp filterset name "string" rule n match-action [ pass discard continue ]

Assigns a match action to the filterset. If set to pass the match-pooladdress is shown.

set dhcp filterset name "string" rule n absent-action [ pass discard continue ]

Assigns an absent action to the filterset. If set to pass the absent-pooladdress is hidden.

set dhcp filterset name "string" rule n match-option-group "option_group*"

Assigns the option group named option_group to match.

set dhcp filterset name "string" rule n match-str "match_string*"

Assigns a match string to the filterset. The match-strstring will be compared against the DHCP DISCOVER option data. This string can contain multiple “*” and “?” wildcard substitutions.

252