Operation Manual - Network Protocol
Quidway S3500 Series Ethernet Switches Chapter 5 DHCP Configuration
Huawei Technologies Proprietary
5-22
Table 5-34 Configure Address Map Entry for Security Check
Operation Command
Add an address map entry for security
check
dhcp relay security ip_address
mac_address static
Delete an address map entry for security
check
undo dhcp relay security ip_address
5.4.5 Enable/Disable DHCP Security Feature on VLAN Interface
Enable DHCP security features will enable address check on VLAN interface while
disable DHCP security features will cancel address check.
Perform the following configuration in VLAN interface view.
Table 5-35 Enable/Disable the DHCP security feature on the VLAN interface
Operation Command
Enable the DHCP security feature on
the VLAN interface
dhcp relay security address-check
enable
Disable the DHCP security feature on
the VLAN interface
dhcp relay security address-check
disable
By default, the switch disables DHCP security features function.
5.4.6 Activating/Deactivating DHCP Relay Dynamic Entries
This configuration task is to activate/deactivate the dynamic IP-MAC address mapping
entries generated by the DHCP relay. Only when the entries are activated, the
corresponding devices can pass the DHCP security check; or else, the devices cannot
access the network even through they have gained a legal IP address.
Perform the following configuration in VLAN interface view.
Table 5-36 Activate/deactivate the dynamic entries generated by the DHCP relay
Operation Command
Activate the dynamic entries generated by
the DHCP relay
address-check dhcp-relay enable
Deactivate the dynamic entries generated by
the DHCP relay
address-check dhcp-relay disable
By default, the dynamic entries generated by the DHCP relay are activated.