h3c s5130-ei系列以太網(wǎng)交換機典型配置舉例6w10009dhcp snooping

1、12。本文假設您已了解 DHCP 相關(guān)特性3DHCP1所示，某科研機構(gòu)有三個項目組，分布在不同的樓層中，通過樓層間的DHCP備與DHCPServer為了12。本文假設您已了解 DHCP 相關(guān)特性3DHCP1所示，某科研機構(gòu)有三個項目組，分布在不同的樓層中，通過樓層間的DHCP備與DHCPServer為了方便管理，希望通過 DHCP 服務分配 IP 地址，同時要求設IPgroup1192.168.0.2192.168.0.39配 192.168.0.100192.168.0.200 之間的 IP 地址； DHCPSnoo 圖DHCPDHCP DeviceVlan- GE1/0/2 DHCP DH

2、CPDeviceDHCP Device1在多個DHCP設備級聯(lián)的網(wǎng)絡中，為了節(jié)省系統(tǒng)資源，不需要每臺所有DHCP客戶端的IP地址和MAC地址的綁定信息，只需在與客戶端綁定信息。間接與DHCP客戶端相連的不信任端口不需地址和MAC2在DHCP在多個DHCP設備級聯(lián)的網(wǎng)絡中，為了節(jié)省系統(tǒng)資源，不需要每臺所有DHCP客戶端的IP地址和MAC地址的綁定信息，只需在與客戶端綁定信息。間接與DHCP客戶端相連的不信任端口不需地址和MAC2在DHCP設備上指向合法的DHCP服務器方向的端口需要設置為信任端口，以DHCP 設備正常轉(zhuǎn)發(fā)DHCP服務器的應答報文，保證DHCP客戶端能夠從合法DHCP服務器獲取IP

3、2圖DHCP DHCP Vlan- GE1/0/2 DHCP DHCP DHCP 不信任端IPVLANDetection 功能（本例為缺省 VLAN 1 內(nèi)基于 DHCP 檢DHCP 本舉例是在 S5130EI_E-CMW710-R3106 版本上進行配置和驗1. Device A的配置 system-DeviceAdhcp2erfaceGigabitEthernet bindingDHCP# GigabitEthernet1/0/1 上配置 DHCP 填充內(nèi)容為 group1dhcpsnoo dhcpinformationinformationcircuit-iderfaceGigabitE

4、thernet bindingDHCP# GigabitEthernet1/0/1 上配置 DHCP 填充內(nèi)容為 group1dhcpsnoo dhcpinformationinformationcircuit-iderfaceGigabitEthernet DeviceAvlanDeviceA-vlan1arpdetectionenable DeviceA-vlan1 quit# erfaceGigabitEthernetDeviceA-GigabitEthernet1/0/2arpdetectiontrust DeviceA-GigabitEthernet1/0/2 quit2Device

5、Bsystem-view DeviceB dhcp snooerfaceGigabitEthernet bindingDHCP# GigabitEthernet1/0/1 上配置 DHCP 填充內(nèi)容為 group2dhcpsnoo dhcpinformationinformationcircuit-idstringerfaceGigabitEthernetDeviceB-GigabitEthernet1/0/2dhcpsnoo DeviceB-GigabitEthernet1/0/2 quiterfaceGigabitEthernet3 bindingDHCP# GigabitEthernet

6、1/0/3 上配置 DHCP 填充內(nèi)容為 group3 bindingDHCP# GigabitEthernet1/0/3 上配置 DHCP 填充內(nèi)容為 group3DeviceBvlanDeviceB-vlan1arpdetectionenable DeviceB-vlan1 quitdhcpsnoo dhcpsnoo informationinformationcircuit-id# erfaceGigabitEthernet 3DeviceCsystem-view DeviceC dhcp snooGigabitEthernet1/0/2erfaceGigabitEthernet 4De

7、viceDDeviceD vlan 2DeviceD-vlan2portGigabitEthernetDeviceD-vlan2erfaceerfaceerface2ipaddress192.168.0.1erface2DeviceDdhcp# VLAN2工作DHCP服務器模式erfaceerfaceerface2dhcpselect4# DHCP 服務器上的相關(guān)配置# DHCP 服務器上的相關(guān)配置8 0 x67726F757031（Circuit ID 子選項內(nèi)容為 group1）的客戶端。DeviceDdhcpclassDeviceD-dhcp-class-group1if-matchop

8、tion82hex67726F757031offset2length6 DeviceD-dhcp-class-group1 quit8 字節(jié)為0 x67726F757032（表示Circuit ID 子選項內(nèi)容為group2）的客戶端DeviceDdhcpclassDeviceD-dhcp-class-group2if-matchoption82hex67726F757032offset2length6 DeviceD-dhcp-class-group2 quit8 字節(jié)為0 x67726F757033（表示Circuit ID 子選項內(nèi)容為group3）的客戶端DeviceDdhcpclas

9、sDeviceD-dhcp-class-group3if-matchoption82hex67726F757033 DeviceD-dhcp-class-group3 quit#DHCP地址1DeviceDdhcpserverip-pool26DeviceD-dhcp-pool-1network192.168.0.0maskDeviceD-dhcp-pool-1classgroup1range192.168.0.2DeviceD-dhcp-pool-1classgroup2range192.168.0.40DeviceD-dhcp-pool-1classgroup3range192.168.0

10、.100erfaceerfaceerface2dhcpserverapplyip-poolerface23.5 group1group3sandWindowsIPEthernetadapter5 ffix :IPAddress.SubnetMask.DefaultGateway ffix :IPAddress.SubnetMask.DefaultGateway.#vlanDevicearpdetectionenable erface#binding record erfacedhcp snoo#Device vlan#erface#binding record informationenablearpdetectiondhcp#erface#bindinginformation enable Device 6dhcp#dhcp#dhcp class group1 if-matchoption82#dhcp class group2 if-matchoption82#dhcp class group3 if-matchoption#dhcpserverip-dhcp#dhcp#dhcp class group1 if-matchoption82#dhcp class group2 if-mat