Dynamic Ipv4 Source Guard Binding By Dhcp Relay Configuration Example - HP 5120 EI Switch Series Configuration Manual

[Device-GigabitEthernet1/0/1] quit
Verification
# Display the dynamic IPv4 source guard binding entries generated on port GigabitEthernet 1/0/1.
[Device-GigabitEthernet1/0/1] display ip check source
Total entries found: 1
MAC Address
0001-0203-0406
# Display DHCP snooping entries to see whether they are consistent with the dynamic entries generated
on GigabitEthernet 1/0/1.
[Device-GigabitEthernet1/0/1] display dhcp-snooping
DHCP Snooping is enabled.
The client binding table for all untrusted ports.
Type : D--Dynamic , S--Static
Type IP Address
==== =============== ============== ============ ==== =================
D 192.168.0.1
The output shows that a dynamic IPv4 source guard entry has been generated based on the DHCP
snooping entry.
Dynamic IPv4 source guard binding by DHCP relay
configuration example
Network requirements
As shown in
interface 100 and VLAN-interface 200 respectively. DHCP relay is enabled on the switch. The host (with
the MAC address 0001-0203-0406) obtains an IP address from the DHCP server through the DHCP relay
agent.
Enable the dynamic IPv4 source guard binding function on interface VLAN-interface 100 to filter packets
based on DHCP relay entries.
Figure 80 Network diagram for configuring dynamic IPv4 source guard binding through DHCP relay
DHCP client
Host
MAC: 0001-0203-0406
Configuration procedure
Configure the dynamic IPv4 source guard binding function
1.
# Configure the IP addresses of the interfaces. (details not shown)
# Configure the dynamic IPv4 source guard binding function on VLAN-interface 100 to filter packets
based on both the source IP address and MAC address.
<Switch> system-view
[Switch] vlan 100
IP Address
192.168.0.1
MAC Address
0001-0203-0406 86335
Figure 80, the switch connects the host and the DHCP server through interfaces VLAN-
DHCP relay agent
Vlan-int 200
Vlan-int 100
Switch
VLAN Interface
1 GE1/0/1
Lease VLAN Interface
1 GigabitEthernet1/0/1
DHCP server
10.1.1.1/24
260
Type
DHCP-SNP