Q: How can we tweak "enforce DHCP" knob on the IAP?
A:
From 4.2.1.0, IAP supports enforce DHCP both on CLI and UI for wireless access.
This feature allows IAP only create layer3 user entry for client obtain IP address via DHCP. For client that use static IP, IAP won’t create layer3 user entry, therefore all its IP traffic will be blocked.
WebUI:
CLI:
IAP # configure t
IAP (config) #wlan ssid-profile btest
IAP (SSID Profile "btest") # enforce-dhcp
IAP (SSID Profile "btest") # end
IAP # commit apply
wlan ssid-profile btest
enable
index 8
type employee
essid btest
opmode opensystem
max-authentication-failures 0
rf-band all
captive-portal disable
dtim-period 1
broadcast-filter none
enforce-dhcp <=========================
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64