218
Enable the IPv4 source guard binding function on the switch’s VLAN-interface 100 to filter packets based
on the DHCP relay entry, allowing only packets from clients that obtain IP addresses from the DHCP
server to pass.
Figure 69 Network diagram for configuring dynamic IPv4 source guard binding through DHCP relay
Switch
Vlan-int 100
Vlan-int 200
10.1.1.1/24
Host
MAC: 0001-0203-0406
DHCP serverDHCP relay agentDHCP client
Configuration procedure
1. Configure the IPv4 source guard function.
# Configure the IP addresses of the interfaces. (Details not shown)
# Configure the IPv4 source guard binding function on VLAN-interface 100 to filter packets based on
both the source IP address and MAC address.
<Switch> system-view
[Switch] vlan 100
[Switch-Vlan100] quit
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip verify source ip-address mac-address
[Switch-Vlan-interface100] quit
2. Configure the DHCP relay agent.
# Enable the DHCP service.
[Switch] dhcp enable
# Configure the IP address of the DHCP server.
[Switch] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to work in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[Switch-Vlan-interface100] dhcp relay server-select 1
[Switch-Vlan-interface100] quit
Verification
# Display the generated IPv4 source guard binding entries.
[Switch] display ip source binding
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 100 Vlan100 DHCP-RLY
To Next Page
Loading...
Need help?
General