HP 3600 v2 Series Security Configuration Manual page 377

Configuration procedure
Configure Gateway
1.
# Configure the IP address of VLAN-interface 1.
<Gateway> system-view
[Gateway] interface Vlan-interface 1
[Gateway-Vlan-interface1] ip address 10.1.1.100 24
Configure the DHCP server
2.
# Enable DHCP, and configure a DHCP address pool.
<Device> system-view
[Device] dhcp enable
[Device] dhcp server ip-pool 1
[Device-dhcp-pool-1] network 10.1.1.0 mask 255.255.255.0
# Add the gateway's IP address into DHCP address pool 1.
[Device-dhcp-pool-1] gateway-list 10.1.1.100
[Device-dhcp-pool-1] quit
# Configure the IP address of VLAN-interface 1.
[Device] interface Vlan-interface 1
[Device-Vlan-interface1] ip address 10.1.1.50 24
Configure Switch A
3.
# Enable DHCP snooping.
<SwitchA> system-view
[SwitchA] dhcp-snooping
# Enable MFF in automatic mode.
[SwitchA] vlan 100
[SwitchA-vlan-100] mac-forced-forwarding auto
[SwitchA-vlan-100] quit
# Configure Ethernet 1/0/2 as a network port.
[SwitchA] interface ethernet 1/0/2
[SwitchA-Ethernet1/0/2] mac-forced-forwarding network-port
# Configure Ethernet 1/0/2 as a DHCP snooping trusted port.
[SwitchA-Ethernet1/0/2] dhcp-snooping trust
Configure Switch B
4.
# Enable DHCP snooping.
<SwitchB> system-view
[SwitchB] dhcp-snooping
# Enable MFF in automatic mode.
[SwitchB] vlan 100
[SwitchB-vlan-100] mac-forced-forwarding auto
[SwitchB-vlan-100] quit
# Configure Ethernet 1/0/6 as a network port.
[SwitchB] interface ethernet 1/0/6
[SwitchB-Ethernet1/0/6] mac-forced-forwarding network-port
# Configure Ethernet 1/0/6 as a DHCP snooping trusted port.
366