98 CHAPTER 5: NETWORK PROTOCOL OPERATION
Configuring the User Address Entry for the DHCP Server Group
To ensure that a valid user with a fixed IP address in a VLAN configured with DHCP
Relay passes the address validity check of the DHCP security feature, you must add
a static address entry which indicates the correspondence between an IP address
and a MAC address.
If an illegal user configures a static IP address which is in conflict with the fixed IP
address of a valid user, the Switch with DHCP Relay function enabled can identify
the valid user and reject the illegal user's request to bind the IP address with the
MAC address.
Perform the following configuration in System View..
Enabling/Disabling the DHCP Security Feature on the VLAN interface
Enabling DHCP security features will start the address validity check on the VLAN
interface; disabling DHCP security features will cancel the address validity check.
Perform the following configuration in VLAN Interface View.
By default, the DHCP security feature is disabled on the VLAN interface.
Displaying and
Debugging DHCP
Configuration
After the above configuration, enter the display command in any view to display
the running of the DHCP configuration, and to verify the effect of the
configuration. Enter the
debugging command in User View to debug DHCP
configuration.
Table 92 Configuring the User Address Entry for the DHCP Server Group
Operation Command
Configure user address entry
for DHCP server group
dhcp-security static
ip_address mac_address
Delete the user address entry
in the DHCP server group
undo dhcp-security {
ip_address
| all | dynamic |
static }
Table 93 Enabling/Disabling DHCP Security Feature on the VLAN Interface
Operation Command
Enable DHCP security feature on VLAN interface address-check enable
Disable DHCP security feature on VLAN interface address-check disable
Table 94 Displaying and Debugging DHCP Configuration
Operation Command
Display configuration information of DHCP
server group
display dhcp-server groupNo
Display configuration information about the
DHCP Server group corresponding to the
VLAN interface
display dhcp-server interface
vlan-interface
vlan_id
Display all address information of the valid
user address table for the DHCP server group
display dhcp-security [
ip_address
| dynamic | static ] [
unit
unit_id
]
Display address allocation information of
DHCP client
display dhcp client [ verbose ]
Enable/disable DHCP client debugging [ undo ] debugging dhcp client {
all | error | event | packet }
To Next Page
Loading...
