Huawei Quidway S2700 Series Configuration Manual page 119

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Enable DHCP snooping.
# Enable DHCP snooping globally.
<Quidway> system-view
[Quidway] dhcp enable
[Quidway] dhcp snooping enable
# Enable DHCP snooping on the user-side interface.
[Quidway] interface gigabitethernet 0/0/2
[Quidway-GigabitEthernet0/0/2] dhcp snooping enable
[Quidway-GigabitEthernet0/0/2] quit
Step 2 Configure the interface as the trusted interface or an untrusted interface.
# Configure the interface on the DHCP server side as the trusted interface.
[Quidway] interface gigabitethernet 0/0/1
[Quidway-GigabitEthernet0/0/1] dhcp snooping trusted
[Quidway-GigabitEthernet0/0/1] quit
# Configure the user-side interface as an untrusted interface.
After DHCP snooping is enabled on GE 0/0/2, GE 0/0/2 is an untrusted interface by default.
Step 3 Enable the function of checking the CHADDR field of DHCP Request messages on the user-
side interface, and configure the alarm function and threshold for discarded packets..
[Quidway] interface gigabitethernet 0/0/2
[Quidway-GigabitEthernet0/0/2] dhcp snooping check dhcp-chaddr enable alarm dhcp-
chaddr enable threshold 120
Step 4 Verify the configuration.
Run the display dhcp snooping command on the Switch, and you can view that DHCP snooping
is enabled globally and in the interface view.
<Quidway> display dhcp snooping global
dhcp snooping enable
Dhcp snooping enable is configured at vlan :NULL
Issue 01 (2011-07-15)
Enable DHCP snooping globally and on the interface.
Configure the interface connected to the DHCP server as the trusted interface.
Enable the function of checking the CHADDR field of DHCP Request messages on the
user-side interface.
Configure the alarm function for discarded packets.
Alarm threshold
NOTE
This configuration example provides only the commands related to the DHCP snooping configuration.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
108