H3C交換機DHCP環境禁止手動修改IP

2021-10-01 15:16:54 字數 1425 閱讀 6899

在某些網路環境下禁止手動修改ip,防止位址衝突。為此禁止手動修改ip也可以在交換機上實現。具體參考如下:

#開啟dhcp snooping並且新增信任介面

[h3c]dhcp snooping enable

[h3c]inte***ce gigabitethernet 1/0/8

[h3c-gigabitethernet1/0/8]dhcp snooping trust

[h3c-gigabitethernet1/0/8]quit

#將連線終端的物理介面開啟dhcp snooping表繫結記錄功能並檢查ip與mac繫結關係。

[h3c]inte***ce gigabitethernet 1/0/5

[h3c-gigabitethernet1/0/5]dhcp snooping binding record

[h3c-gigabitethernet1/0/5]ip verify source ip-address mac-address

[h3c-gigabitethernet1/0/5]quit

#檢視dhcp snooping繫結關係

[h3c]display ip source binding dhcp-snooping

total entries found: 1

ip address mac address inte***ce vlan type

192.168.1.103 b00c-d16b-c771 ge1/0/5 1 dhcp snooping

#配置中繼

[h3c]dhcp enable

[h3c-vlan-inte***ce10]ip address 192.168.10.252 24

[h3c-vlan-inte***ce10]dhcp select relay

[h3c-vlan-inte***ce10]dhcp relay server-address 192.168.10.254

[h3c-vlan-inte***ce10]quit

#配置記錄和開啟驗證

[h3c]dhcp relay client-information record #記錄dhcp中繼表項

[h3c]inte***ce vlan-inte***ce 10

[h3c-vlan-inte***ce10]ip verify source ip-address mac-address #啟動繫結關係

[h3c-vlan-inte***ce10]quit

#驗證配置

[h3c]display ip source binding dhcp-relay

total entries found: 1

ip address mac address inte***ce vlan type

192.168.10.1 b00c-d16b-c771 vlan10 10 dhcp relay

H3C交換機DHCP中繼配置

環境 h3c核心三層交換機,劃分兩個vlan,分別是 vlan20 ip 192.168.1.250 vlan30 ip 10.10.0.1 vlan20下有一台win2008伺服器提供dhcp服務,dhcp包含兩個作用域分別為192.168.1.0和10.10.0.0 要讓dhcp伺服器同時對vl...

h3c交換機筆記

一 埠配置 sysint g0 1 combo enable copper fiber 切換網口和光口 description text duplex full half auto 設定雙工模式 speed 10 100 1000 10000 auto mtu 1430 設定mtu值 port li...

h3c交換機配置遠端管理 H3C交換機配置遠端登入

普通設定telnet密碼 user inte ce aux 0 user inte ce vty 0 4 authentication mode scheme user privilege level 3 set authentication password cipher 52 protocol ...