Zte ZXR10 8900 Series - Configuration Example; DHCP Snooping Preventing False DHCP Server; Example; Figure 21 DHCP Snooping Preventing False DHCP Server

ZXR108900SeriesUserManual(BasicCongurationVolume)
DHCPSnoopingPreventingFalse
DHCPServerConfigurationExample
DHCPserver1connectswithfei_1/1oftheswitch.DHCPServer
1isconguredbyadministrator .DHCPserver2connectswith
fei_1/2ofswitch,anditisaprivateandillegalserver .Fei_1/1
andfei_1/2belongtovlan100.EnableDHCPsnoopingfunctionon
theswitchtopreventsettingfalseDHCPserverinthenetwork,as
showninFigure21.
Atthistime,itisrequiredtoenableDHCPsnoopingfunctionin
vlan100andsetfei_1/1asatrustport.
FIGURE21DHCPSNOOPINGPREVENTINGFALSEDHCPSERVER
Congurationontheswitch:
ZXR10(config)#interfacefei_1/1
ZXR10(config-if)#swacvlan100
ZXR10(config)#interfacefei_1/2
ZXR10(config-if)#swacvlan100
ZXR10(config)#vlan100
ZXR10(config-vlan)#ipdhcpsnooping
ZXR10(config)#ipdhcpsnoopingenable
ZXR10(config)#ipdhcpsnoopingvlan100
ZXR10(config)#ipdhcpsnoopingtrustfei_1/1
DHCPSnoopingPreventingStaticIP
ConfigurationExample
DHCPserverbelongstovlan100andthePCsbelongtovlan200.
ThePCgetsIPaddressthroughtheserver .Atthistimeitisnec-
essarytoforbidthePCstosetstaticIPaddressthroughDHCP
snoopinganddynamicARPinspection.ThisisshowninFigure22.
70CondentialandProprietaryInformationofZTECORPORATION