HPE FlexNetwork 7500 Series Security Configuration Manual page 474

Figure 140 Network diagram
GE1/0/2
Host A
Host B
GE1/0/1
Host C
Configuration procedure
1. Configure the IP addresses of the gateway and the DHCP server, as shown in
2. Configure Switch A:
# Enable DHCP snooping.
<SwitchA> system-view
[SwitchA] dhcp snooping enable
# Enable MFF in automatic mode on VLAN 100.
[SwitchA] vlan 100
[SwitchA-vlan100] mac-forced-forwarding auto
[SwitchA-vlan100] quit
# Configure IP address 10.1.1.50 for the DHCP server.
[SwitchA-vlan100] mac-forced-forwarding server 10.1.1.50
# Configure GigabitEthernet 1/0/1 as a network port.
[SwitchA] interface gigabitethernet 1/0/1
[SwitchA-GigabitEthernet1/0/1] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/1 as a DHCP snooping trusted port.
[SwitchA-GigabitEthernet1/0/1] dhcp snooping trust
3. Configure Switch B:
# Enable DHCP snooping.
<SwitchB> system-view
[SwitchB] dhcp snooping enable
# Enable MFF in automatic mode on VLAN 100.
[SwitchB] vlan 100
[SwitchB-vlan100] mac-forced-forwarding auto
[SwitchB-vlan100] quit
# Configure IP address 10.1.1.50 for the DHCP server.
[SwitchB-vlan100] mac-forced-forwarding server 10.1.1.50
# Configure GigabitEthernet 1/0/2 as a network port.
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/2 as a DHCP snooping trusted port.
[SwitchB-GigabitEthernet1/0/2] dhcp snooping trust
Switch A
GE1/0/1 GE1/0/2
GE1/0/3 GE1/0/3
GE1/0/2
Switch B
Switch C
GE1/0/1
10.1.1.100/24
460
Gateway
DHCP server
Device
10.1.1.50/24
Figure 140.