Huawei Quidway S9300 Configuration Manual page 160

3 DHCP Snooping Configuration
Run the display dhcp snooping interface command, and you can view information about DHCP
snooping on the interface.
[Quidway] display dhcp snooping interface gigabitethernet 1/0/0
dhcp snooping enable
dhcp option82 insert enable
dhcp snooping check user-bind
dhcp snooping alarm check user-bind enable
dhcp snooping alarm user-bind threshold 120
dhcp packet dropped by user-bind checking = 0
dhcp snooping check mac-address
dhcp snooping alarm mac-address enable
dhcp snooping alarm mac-address threshold 120
dhcp packet dropped by mac-address checking = 0
dhcp snooping alarm untrust-reply enable
dhcp snooping alarm untrust-reply threshold 120
dhcp packet dropped by untrust-reply checking = 0
[Quidway] display dhcp snooping interface gigabitethernet 2/0/0
dhcp snooping trusted
Run the display user-bind all command, and you can view the static binding entries of users.
[Quidway] display user-bind all
bind-table:
ifname
-------------------------------------------------------------------------------
GE1/0/0
-------------------------------------------------------------------------------
Static binditem count:
Run the display dhcp option82 interface command, and you can view the configuration of
Option 82 on the interface.
[Quidway] display dhcp option82 interface gigabitethernet 1/0/0
dhcp option82 insert enable
----End
Configuration Files
#
sysname Quidway
#
vlan batch 10
#
dhcp enable
dhcp snooping enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate alarm enable
dhcp snooping check dhcp-rate 90
dhcp snooping check dhcp-rate alarm threshold 80
#
user-bind static ip-address 10.1.1.1 mac-address 0001-0002-0003 interface
gigabitethernet 1/0/0 vlan 10
#
interface GigabitEthernet1/0/0
dhcp snooping enable
dhcp snooping alarm untrust-reply enable
dhcp snooping alarm untrust-reply threshold 120
dhcp snooping check mac-address enable
dhcp snooping alarm mac-address enable
dhcp snooping alarm mac-address threshold 120
dhcp snooping check user-bind enable
dhcp snooping alarm user-bind enable
dhcp snooping alarm user-bind threshold 120
dhcp option82 insert enable
#
3-50
O/I-vlan mac-address
10/ -- 0001-0002-0003 10.1.1.1
1
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
ip-address tp lease vsi
S 0
Static binditem total count:
Configuration Guide - Security
--
1
Issue 06 (2010–01–08)