Dhcp Snooping Configuration Examples; Dhcp-Snooping Option 82 Support Configuration Example - H3C S5600 SERIES Operation Manual

To do...
Create a static binding
Enable DHCP snooping and specify trusted ports on the switch before configuring IP filtering.
You are not recommended to configure IP filtering on the ports of a fabric or an aggregation group.
To create a static binding after IP filtering is enabled with the mac-address keyword specified on a
port, the mac-address argument must be specified; otherwise, the packets sent from this IP
address cannot pass the IP filtering.
A static entry has a higher priority than the dynamic DHCP snooping entry that has the same IP
address as the static one. That is, if the static entry is configured after the dynamic entry is
recorded, the static entry overwrites the dynamic entry; if the static entry is configured before
DHCP snooping is enabled, no DHCP client can obtain the IP address of the static entry, that is,
the dynamic DHCP snooping entry cannot be generated.
The VLAN ID of the IP static binding configured on a port is the VLAN ID of the port.

DHCP Snooping Configuration Examples

DHCP-Snooping Option 82 Support Configuration Example

Network requirements
As shown in Figure 4-6
GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 are respectively connected to
Client A, Client B, and Client C.
Enable DHCP snooping on the switch.
Specify GigabitEthernet 1/0/5 on the switch as a trusted port for DHCP snooping.
Enable DHCP-snooping Option 82 support on the switch and set the remote ID field in Option 82 to
the system name of the switch. Set the circuit ID sub-option to abcd in DHCP packets from VLAN
1 on GigabitEthernet 1/0/3.
Use the command...
ip source static binding ip-address
ip-address [ mac-address
mac-address ]
GigabitEthernet 1/0/5 of the switch is connected to the DHCP server, and
4-10
Remarks
Optional
By default, no static binding
entry is created.