Huawei Quidway S2700 Series Configuration Manual page 124

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
Procedure
Step 1 Enable DHCP snooping.
# Enable DHCP snooping globally.
<Quidway> system-view
[Quidway] dhcp enable
[Quidway] dhcp snooping enable
# Enable DHCP snooping on the user-side interface. The configuration procedures of Ethernet
0/0/2 and GE0/0/1 are similar to the configuration procedure of Ethernet 0/0/1, and is not
mentioned here.
[Quidway] interface ethernet 0/0/1
[Quidway-Ethernet0/0/1] dhcp snooping enable
[Quidway-Ethernet0/0/1] quit
Step 2 Configure the interface as the trusted interface or an untrusted interface.
# Configure the interface on the DHCP server side as the trusted interface.
[Quidway] interface gigabitethernet 0/0/1
[Quidway-GigabitEthernet0/0/1] dhcp snooping trusted
[Quidway-GigabitEthernet0/0/1] quit
# Configure the user-side interface as an untrusted interface.
After DHCP snooping is enabled on Ethernet 0/0/1 and Ethernet 0/0/2, Ethernet 0/0/1 and
Ethernet 0/0/2 is an untrusted interface by default.
Step 3 Configure the rate of sending DHCP messages to the DHCP protocol stack and the alarm function
for discarded packets.
# Configure the rate of sending DHCP messages to the DHCP protocol stack and the alarm
function for discarded packets on interfaces. The configuration procedures of Ethernet 0/0/2
andGE0/0/1 are similar to the configuration procedure of Ethernet 0/0/1, and is not mentioned
here.
[Quidway-Ethernet0/0/1] dhcp snooping check dhcp-rate enable 50 alarm dhcp-rate
enable threshold 50
[Quidway-Ethernet0/0/1] quit
Step 4 Verify the configuration.
Issue 01 (2011-07-15)
Enable DHCP snooping globally and in the interface view.
Configure the interface connected to the DHCP server as the trusted interface.
Set the rate of sending DHCP Request messages to the protocol stack on interfaces.
Configure the alarm function for discarded packets on interfaces.
Rate of sending DHCP Request messages
Alarm threshold
NOTE
This configuration example provides only the commands related to the DHCP snooping configuration.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
113