Blocking DHCP packets on D-Link DES-38xx

Nothing complicated, just create an ACL rule, due to which on certain ports the switch will drop or pass packets that go to client port 67 from a DHCP server and thus it will not receive IP from unnecessary DHCP servers.

create access_profile ip udp src_port_mask 0xFFFF profile_id 5
config access_profile profile_id 5 add access_id 1 ip udp src_port 67 port 25-28 permit
config access_profile profile_id 5 add access_id 5 ip udp src_port 67 port 1-24 deny

Leave a comment

Leave a Reply