Huawei Quidway S9300 Configuration Manual page 145

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Enable DHCP snooping.
# Enable DHCP snooping globally.
<Quidway> system-view
[Quidway] dhcp enable
[Quidway] dhcp snooping enable
# Enable DHCP snooping on the user-side interface.
[Quidway] interface gigabitethernet 2/0/0
[Quidway-GigabitEthernet2/0/0] dhcp snooping enable
[Quidway-GigabitEthernet2/0/0] quit
Step 2 Enable the checking of the CHADDR field of DHCP Request messages on the user-side
interface.
[Quidway] interface gigabitethernet 2/0/0
[Quidway-GigabitEthernet2/0/0] dhcp snooping check mac-address enable
Step 3 Configure the packet discarding alarm function.
# Enable the packet discarding alarm function.
[Quidway-GigabitEthernet2/0/0] dhcp snooping alarm mac-address enable
# Set the alarm threshold.
[Quidway-GigabitEthernet2/0/0] dhcp snooping alarm mac-address threshold 120
Step 4 Verify the configuration.
Run the display dhcp snooping command on the S9300, and you can view that DHCP snooping
is enabled globally and in the interface view.
<Quidway> display dhcp snooping global
dhcp snooping enable
Dhcp snooping enable is configured at these vlan :NULL
Dhcp snooping enable is configured at these interface :
GigabitEthernet2/0/0
Dhcp snooping trusted is configured at these interface :NULL
Dhcp option82 insert is configured at these interface :NULL
Dhcp option82 rebuild is configured at these interface :NULL
dhcp packet drop count within alarm range : 0
Issue 06 (2010–01–08)
Enable the checking of the CHADDR field of DHCP Request messages on the user-side
interface.
Configure the packet discarding alarm function.
Alarm threshold
NOTE
This configuration example provides only the commands related to the DHCP snooping configuration.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
3-35