Dynamic Ipv4Sg Using Dhcp Relay Agent Configuration Example - HPE FlexNetwork 7500 Series Security Configuration Manual

Dynamic IPv4SG using DHCP relay agent configuration
example
Network requirements
As shown in
from the DHCP server through the DHCP relay agent.
Enable dynamic IPv4SG on VLAN-interface 100 to filter incoming packets by using the IPv4SG
bindings generated based on DHCP relay entries.
Figure 117 Network diagram
DHCP client
Host
MAC: 0001-0203-0406
Configuration procedure
1. Configure dynamic IPv4SG:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4SG on VLAN-interface 100 and verify the source IP address and MAC address for
dynamic IPSG.
<Switch> system-view
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip verify source ip-address mac-address
[Switch-Vlan-interface100] quit
2. Configure the DHCP relay agent:
# Enable the DHCP service.
[Switch] dhcp enable
# Enable recording DHCP relay entries.
[Switch] dhcp relay client-information record
# Configure VLAN-interface 100 to operate in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Specify the IP address of the DHCP server.
[Switch-Vlan-interface100] dhcp relay server-address 10.1.1.1
[Switch-Vlan-interface100] quit
Verifying the configuration
# Verify that a dynamic IPv4SG binding is generated based on a DHCP relay entry.
[Switch] display ip source binding dhcp-relay
Total entries found: 1
IP Address
192.168.0.1
Figure 117, DHCP relay agent is enabled on the switch. The host obtains an IP address
DHCP relay agent
Vlan-int100
Switch
MAC Address
0001-0203-0406 Vlan100
DHCP server
Vlan-int200
10.1.1.1/24
Interface
411
VLAN Type
100 DHCP relay