Huawei Quidway S9300 Configuration Manual page 129

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Context
You need to enable DHCP snooping globally before enabling DHCP snooping on an
interfaceor in a VLAN. By default, DHCP snooping is disabled globally and on an interfaceor
in a VLAN.
Before enabling DHCP snooping, enable DHCP globally.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
dhcp enable
DHCP is enabled globally.
Step 3 Run:
dhcp snooping enable
DHCP snooping is enabled globally.
Step 4 Run:
interface interface-type interface-number
The interface view is displayed.
The interface can be an Ethernet interface, a GE interface, or an Eth-Trunk interface.
Or, run:
vlan vlan-id
The VLAN view is displayed.
Step 5 Run:
dhcp snooping enable
DHCP snooping is enabled on the interfaceor in a VLAN.
DHCP snooping must be enabled on all the user-side interfaces of the S9300. Otherwise,
configurations related to DHCP snooping do not take effect on the interfaces. This restriction
does not apply to a network-side interface.
Step 6 (Optional) Run:
quit
Return to the system view.
Step 7 (Optional) Run:
dhcp snooping over-vpls enable
DHCP snooping is enabled on the S9300 of the VPLS network.
On the VPLS network, after the dhcp snooping over-vpls enable command is run on the
S9300, DHCP over VPLS messages are sent to the CPU of the main control board for processing.
In this case, if you set related parameters of DHCP snooping on the interface, the S9300 can
Issue 06 (2010–01–08) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
3-19