H3C交换机DHCP环境禁止手动修改IP

1、DHCP环境

在某些网络环境下禁止手动修改IP，防止地址冲突。为此禁止手动修改IP也可以在交换机上实现。具体参考如下：

#开启DHCP Snooping并且添加信任接口 [H3C]dhcp snooping enable [H3C]interface GigabitEthernet 1/0/8 [H3C-GigabitEthernet1/0/8]dhcp snooping trust [H3C-GigabitEthernet1/0/8]quit
#将连接终端的物理接口开启dhcp snooping表绑定记录功能并检查ip与mac绑定关系。
[H3C]interface GigabitEthernet 1/0/5
[H3C-GigabitEthernet1/0/5]dhcp snooping binding record
[H3C-GigabitEthernet1/0/5]ip verify source ip-address mac-address
[H3C-GigabitEthernet1/0/5]quit
#查看dhcp snooping绑定关系 [H3C]display ip source binding dhcp-snooping Total entries found: 1 IP Address MAC Address Interface VLAN Type 192.168.1.103 b00c-d16b-c771 GE1/0/5 1 DHCP snooping

2、DHCP中继环境

#配置中继
[H3C]dhcp enable
[H3C-Vlan-interface10]ip address 192.168.10.252 24
[H3C-Vlan-interface10]dhcp select relay
[H3C-Vlan-interface10]dhcp relay server-address 192.168.10.254
[H3C-Vlan-interface10]quit
#配置记录和开启验证 [H3C]dhcp relay client-information record #记录dhcp中继表项 [H3C]interface Vlan-interface 10 [H3C-Vlan-interface10]ip verify source ip-address mac-address #启动绑定关系 [H3C-Vlan-interface10]quit
#验证配置
[H3C]display ip source binding dhcp-relay
Total entries found: 1
IP Address MAC Address Interface VLAN Type
192.168.10.1 b00c-d16b-c771 Vlan10 10 DHCP relay
赞 (0)

相关推荐