Configuration Guide DHCP Relay Configuration
Analysis
The port connecting the DHCP Snooping switch and the DHCP Relay switch is
the access port. DHCP Relay is required to enable the DHCP Client to
auto-obtain the IP address to surf the Internet across the network segment.
To prevent the illegal users from setting the IP address to surf the Internet, you
can: 1) Enable DAI (Dynamic ARP Inspection) function in the global
configuration mode; 2) Configure the address-bind in the interface configuration
mode, and configuret the arp-check function to prevent the illegal users from
surfing the Internet. For this configuration example, you may use the first
method.
Configuration Steps
Set up the configuration environment based on the above topology figure, and
configurate according to the following steps:
DHCP Snooping Configuration:
# Enable DHCP Snooping
Ruijie(config)# ip dhcp snooping
# Set Gi0/2 connecting the server as the Trust Port
Ruijie(config)# interface gigabitEthernet 0/2
Ruijie(config-if)# ip dhcp snooping trust
# Set Gi0/2 as the Trust Port of ARP detection
Ruijie(config-if)# ip arp inspection trust
Ruijie(config-if)# exit
# Enable the DAI function in the specified VLAN
Ruijie(config)# ip arp inspection vlan 1
# Set the IP address(SVI1) for the device
Ruijie(config)# interface vlan 1
Ruijie(config-if)# ip address 10.2.0.1 255.255.0.0
# Set the static route to another network segment(10.1.0.0/16)
Ruijie(config)# ip route 10.1.0.0 255.255.0.0 10.2.1.1
DHCP Relay Configuration:
# Enable the DHCP relay agent
Ruijie(config)# server dhcp
To Next Page
Loading...
