Motorola 2200 User Manual

Page 157

Advertising
background image

157

DHCP Option Filtering

Beginning with Firmware Version 7.7, suppor t for DHCP option filtering is provided via the filterset set-
tings.

set dhcp filterset name "

string

" rule

n

type [ dhcp-option | hw-address | requested-option ]

Specifies a DHCP filterset named string as one of three possible types:

The rule can either specify an option and option contents,

dhcp-option; a client hardware address

range,

hw-address; or an option the client is requesting, requested-option. For hw-address, you will

need to enter

start-address and end-address values; for the others a dhcp-option parameter must

be set.

By default a rule is of type

dhcp-option, for backwards compatibility.

set dhcp filterset name "

string

" rule

n

dhcp-option [ 0... 255 ]

Creates a DHCP filterset named

string, for example “settopbox,” with rule number n.

Up to two filtersets can be added. Your Gateway suppor ts a single LAN DHCP ser ver instance, but an
additional filterset is available for use when bridging, to block undesired DHCP traffic. Up to 8

rules can

be created in the filterset, which are evaluated in order.

dhcp-option determines which DHCP option should be compared. A typical value would be to use
option 60 data for comparison, but allowing this value to be configured permits more flexibility.

set dhcp filterset name “settopbox” rule 1 type dhcp-option

set dhcp filterset name "

string

" rule

n

match-action

[ pass | discard | continue ]

Assigns a match action to the filterset. If set to

pass the match-pool address is shown.

set dhcp filterset name "

string

" rule

n

absent-action

[ pass | discard | continue ]

Assigns an absent action to the filterset. If set to

pass the absent-pool address is shown.

set dhcp filterset name "

string

" rule

n

match-option-group "

option_group

*"

Assigns the option group named

option_group to match.

set dhcp filterset name "

string

" rule

n

match-str "

match_string

*"

Assigns a match string to the filterset. The

match-str string will be compared against the DHCP DIS-

COVER option data. This string can contain multiple “*” and “?” wildcard substitutions.

Advertising