HP VSR1000 Security Configuration Manual page 330

[DeviceA-Ethernet1/1] ip address 10.1.1.1 24
[DeviceA-Ethernet1/1] quit
# Configure DHCP.
[DeviceA] dhcp enable
[DeviceA] dhcp server ip-pool 1
[DeviceA-dhcp-pool-1] network 10.10.1.0 mask 255.255.255.0
[DeviceA-dhcp-pool-1] gateway-list 10.10.1.1
[DeviceA-dhcp-pool-1] quit
[DeviceA] ip route-static 10.10.1.0 24 10.1.1.2
2. Configure the router:
# Enable DHCP.
<Router> system-view
[Router] dhcp enable
# Specify the IP addresses of GigabitEthernet 1/0 and GigabitEthernet 2/0.
[Router] interface GigabitEthernet 1/0
[Router-GigabitEthernet1/0] ip address 10.1.1.2 24
[Router-GigabitEthernet1/0] quit
[Router] interface GigabitEthernet 2/0
[Router-GigabitEthernet2/0] ip address 10.10.1.1 24
# Enable DHCP relay agent on GigabitEthernet 2/0.
[Router-GigabitEthernet2/0] dhcp select relay
# Add the DHCP server 10.1.1.1 to DHCP server group 1.
[Router-GigabitEthernet2/0] dhcp relay server-address 10.1.1.1
# Enable authorized ARP.
[Router-GigabitEthernet2/0] arp authorized enable
[Router-GigabitEthernet2/0] quit
# Enable recording of relay entries on the relay agent.
[Router] dhcp relay client-information record
3. Configure Device B:
<DeviceB> system-view
[DeviceB] ip route-static 10.1.1.0 24 10.10.1.1
[DeviceB] interface ethernet 1/2
[DeviceB-Ethernet1/2] ip address dhcp-alloc
[DeviceB-Ethernet1/2] quit
Verifying the configuration
After Device B obtains an IP address from Device A, display the authorized ARP information on the router.
[Router] display arp all
Type: S-Static
IP Address
10.10.1.2
The output shows that Device A assigned the IP address 10.10.1.2 to Device B.
Device B must use the IP address and MAC address in the authorized ARP entry to communicate with the
router. Otherwise, the communication fails. Thus the user validity is ensured.
D-Dynamic O-Openflow
MAC Address VLAN
0012-3f86-e94c N/A
M-Multiport
Interface
GE2/0
320
I-Invalid
Aging Type
20 D