Deny DHCP Offers

This ACL will prevent a port from being able to act as a DHCP server and offer IP addresses.  This prevents the inadvertent or malicious offering of DHCP IP addresses by users attached to ports of the system.  Typically, IP addresses should only be assigned by servers in the Distribution or Core of the network and not from endpoints attached to ONT ports.   This ACL should be added as a Card Level ACL to the system to minimize ACL resources used.

Deny DHCP Offers Procedure   

1. Open a Panorama PON (EMS) session, click on the Profile icon button and the ACL tab.
2. Select the EMS ACL Create a new profile icon and name the ACL profile to DenyDHCP.  
3. Click on the Create Rule button and perform the following steps:  
   
   
    

Step 1: Enter "Deny-DHCP" in Rule Name: entry box:

Step 2: Select "Extended ACL" from the ACL Type: Dropdown

Step 3: Select "Deny" from the Action: Dropdown

Step 4: Select "Ipv4" from the Filter Type: Radio Selections

Step 5: Select "Any Mac(s)" from the SourceMAC(s): dropdown

Step 6: Click on the Add button to add the MAC address and bit count to the Source Mac(s) window

Step 7: Select the MAC address entry in the Source Mac(s) window

Step 10: Add "67" to the Distribution Port: entry box 

Step 11: Click on the Add button to add the Bound SRC IP(s) and bit count to the Bound SRC IP(s):  window

Step 12: Click on the Save button to save the rule profile

4. Click on the Apply button to add the ACL profile to the Profile Name window list.
5. After the Profile has been generated, the ACL status is displayed.  Click on the Close button to complete the ACL profile.
    

Previous  |   Next