Operation Manual - Network Protocol
Quidway S3000-EI Series Ethernet Switches Chapter 2
DHCP-Snooping Configuration
Huawei Technologies Proprietary
2-1
The client broadcasts DHCPREQUEST packet to request DHCP server to assign
nabled, the switch can distract IP address and MAC address
orrect IP
2.2 Configure DHCP-Snooping
function of the Switch
2.2.1 Ena / ing Function of the Switch
Chapter 2 DHCP-Snooping Configuration
2.1 DHCP-Snooping Overview
For security, the IP addresses used by online users may be recorded to confirm the
association between the users’ IP addresses and their MAC addresses. The Layer 3
Ethernet switch records the IP addresses obtained by the clients with DHCP Relay,
while the Layer 2 Ethernet switch listens to the DHCP broadcast packets for this
purpose.
To assign IP addresses to the clients, DHCP server transmits DHCPACK packets. After
received the packets, the client can obtain an IP address. Snooping DHCPACK is a way
to know the clients’ IP addresses.
address. The IP address requested through DHCPREQUEST is the same as that
assigned through DHCPACK. So snooping DHCPREQUEST is another way to know
clients’ IP addresses.
With DHCP-Snooping e
from the DHCPACK or DHCPREQUEST packets received and record them.
In addition, pseudo-DHCP servers in the network may cause users to get inc
addresses. To guarantee that users can obtain IP address from the legal DHCP servers,
DHCP-Snooping allows ports to be set as trusted or distrusted. The former ports
connect DHCP servers or other switches and the latter ports connect users or network.
Distrusted ports discard the DHCPACK and DHCPOFF packets from DHCP servers,
whereas trusted ports forward these types of packets. In this way, users can get correct
IP address.
DHCP-Snooping configuration includes:
z Enable/Disable the DHCP-Snooping
z Setting the port as trusted port
ble Disable the DHCP-Snoop
Perform the following configuration in System view.
To Next Page
Loading...
Need help?
General