Huawei Quidway S9300 Configuration Manual page 166

3 DHCP Snooping Configuration
Step 2 Configure DHCP snooping.
1.
2.
3.
3-56
PW MAC Learn Style
Encapsulation Type
MTU
Diffserv Mode
Mpls Exp
DomainId
Domain Name
VSI State
VSI ID
*Peer Router ID
VC Label
Peer Type
Session
Tunnel ID
Interface Name
State
**PW Information:
*Peer Ip Address
PW State
Local VC Label
Remote VC Label
PW Type
Tunnel ID
FIB Link-ID
Enable DHCP snooping.
Enable DHCP snooping globally and on the interface.
# Configure PE1.
[PE1] dhcp enable
[PE1] dhcp snooping enable
[PE1] interface gigabitethernet 1/0/0
[PE1-GigabitEthernet1/0/0] dhcp snooping enable
[PE1-GigabitEthernet1/0/0] quit
[PE1] interface gigabitethernet 2/0/0
[PE1-GigabitEthernet2/0/0] dhcp snooping enable
[PE1-GigabitEthernet2/0/0] quit
Enable DHCP snooping over VPLS.
# Configure PE1.
[PE1] dhcp snooping over-vpls enable
Configure the trusted interface.
# Configure PE1.
Configure the interface connecting to the DHCP server as a trusted interface and enable
DHCP snooping on all the interfaces connected to the DHCP client. If the interface at the
client side is not configured with "Trusted", the default interface mode is "Untrusted" after
DHCP snooping is enabled on the interface. This prevents bogus DHCP server attacks.
[PE1] interface gigabitethernet 2/0/0
[PE1-GigabitEthernet2/0/0] dhcp snooping trusted
[PE1-GigabitEthernet2/0/0] quit
Configure the DHCP snooping binding table.
# Configure PE1.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
: unqualify
: vlan
: 1500
: uniform
: --
: 255
:
: up
: 2
: 2.2.2.9
: 27648
: dynamic
: up
: 0x802000
: Vlanif20
: up
: 2.2.2.9
: up
: 21504
: 21504
: label
: 0x802000
: 1
Configuration Guide - Security
Issue 06 (2010–01–08)