Huawei Quidway S3500 Series Operation Manual page 138

Operation Manual - Network Protocol
Quidway S3500 Series Ethernet Switches
Table 5-34 Configure Address Map Entry for Security Check
Add an address map entry for security
check
Delete an address map entry for security
check
5.4.5 Enable/Disable DHCP Security Feature on VLAN Interface
Enable DHCP security features will enable address check on VLAN interface while
disable DHCP security features will cancel address check.
Perform the following configuration in VLAN interface view.
Table 5-35 Enable/Disable the DHCP security feature on the VLAN interface
Enable the DHCP security feature on
the VLAN interface
Disable the DHCP security feature on
the VLAN interface
By default, the switch disables DHCP security features function.
5.4.6 Activating/Deactivating DHCP Relay Dynamic Entries
This configuration task is to activate/deactivate the dynamic IP-MAC address mapping
entries generated by the DHCP relay. Only when the entries are activated, the
corresponding devices can pass the DHCP security check; or else, the devices cannot
access the network even through they have gained a legal IP address.
Perform the following configuration in VLAN interface view.
Table 5-36 Activate/deactivate the dynamic entries generated by the DHCP relay
Activate the dynamic entries generated by
the DHCP relay
Deactivate the dynamic entries generated by
the DHCP relay
By default, the dynamic entries generated by the DHCP relay are activated.
Operation
Operation
Operation
Huawei Technologies Proprietary
5-22
Chapter 5 DHCP Configuration
Command
dhcp relay security
mac_address static
undo dhcp relay security ip_address
Command
dhcp relay security address-check
enable
dhcp relay security address-check
disable
Command
address-check dhcp-relay enable
address-check dhcp-relay disable
ip_address