Huawei Quidway S9300 Configuration Manual page 169

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
Issue 06 (2010–01–08)
#
vlan batch 10 20
#
dhcp enable
dhcp snooping enable
dhcp snooping over-vpls enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate alarm enable
dhcp snooping check dhcp-rate alarm threshold 80
user-bind static ip-address 10.1.1.1 mac-address 0001-0002-0003 interface
Gigab
itEthernet1/0/0 vlan 20
#
mpls lsr-id 1.1.1.9
mpls
#
mpls l2vpn
#
vsi v123 static
pwsignal ldp
vsi-id 2
peer 2.2.2.9
#
mpls ldp
#
interface Vlanif10
ip address 100.1.1.1 255.255.255.0
mpls
mpls ldp
#
interface Vlanif20
l2 binding vsi v123
#
interface GigabitEthernet1/0/0
port link-type trunk
port trunk allow-pass vlan 20
dhcp snooping enable
dhcp option82 insert enable
dhcp snooping check user-bind enable
dhcp snooping alarm user-bind enable
dhcp snooping alarm user-bind threshold 120
dhcp snooping check mac-address enable
dhcp snooping alarm mac-address enable
dhcp snooping alarm mac-address threshold 120
dhcp snooping alarm untrust-reply enable
dhcp snooping alarm untrust-reply threshold 120
dhcp snooping max-user-number 3000
#
interface GigabitEthernet2/0/0
port link-type trunk
port trunk allow-pass vlan 10
dhcp snooping enable
dhcp snooping trusted
#
interface LoopBack1
ip address 1.1.1.9 255.255.255.255
#
ospf 1
area 0.0.0.0
network 1.1.1.9 0.0.0.0
network 100.1.1.0 0.0.0.255
#
return
Configuration file of PE2
#
sysname PE2
#
vlan batch 10 30
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
3-59