Chapter5ServiceConguration
SwitchB(cfg)#showvlan10
VlanId:10VlanStatus:enabled
VlanName:
VlanMode:Dynamic
Taggedports:1
Untaggedports:
Forbiddenports:
5.27DHCPConguration
DHCPOverview
TheDynamicHostCongurationProtocol(DHCP)enablesthehosttorequestdynamic
addressesfromtheserver.
TheZXR105250DHCPfunctionincludesthefollowingcontents:
TheDHCPsnoopingfunctionpreventsbogusDHCPserversfrombeingdeployedinthe
network,andinthiscase,theportconnectingtoDHCPservermustbesettoatrusted
port.Besides,thedynamicARPinspectiontechnologycanbeusedtogethertoprevent
illegalIPandMACaddressbinding,thusensuringnormalassignmentofIPaddresses
bytheDHCPserver.DHCPSnoopingandOption82aredesignedtosolvethesesafety
problems.DHCPSnooping,namelyDHCPpacketltering,istodetectlegalityofDHCP
packetsbasedonsomespecialrulesandlterillegalpackets.UseOption82techniqueto
providemoreadditionalinformation,andthenstrengthenthenetworksafetyability.
IntheDHCPservicesystem,theZXR105250seriesswitchesareprovidedwithalotof
automaticallydeployedfunctions.Fordetails,refertoDownloadingtheSoftwareVersion
Automatically.
ConguringDHCP
TheDHCPcongurationincludesthefollowingcommands:
CommandFunction
zte(cfg)#setdhcpsnooping-and-option82{enable|disable}EnablesordisablesDHCP
snoopingandOption82globally.
zte(cfg)#setdhcpsnooping{add|delete}{port<portlist>|trunk
<trunklist>}
EnablesordisablesDHCP
Snoopingfunctionbasedonthe
port/trunk.
zte(cfg)#setdhcpport<portlist>{server|cascade|client}SetsDHCPattributeoftheport.
zte(cfg)#setdhcptrunk<trunklist>{server|default}SetstrunkattributeinDHCP
snooping.
zte(cfg)#setdhcpip-source-guard{{add|delete}port<portlist>|
quota<0-400>}
Enablesordisablesport
ip-source-guardfunction.
5-95
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential