Configuring Basic Dhcp Snooping - HPE FlexNetwork MSR Series Comware 7 Layer 3 - Ip Services Configuration Manuals

Configuring basic DHCP snooping

The following matrix shows the feature and hardware compatibility:
Hardware
MSR954(JH296A/JH297A/JH298A/JH299A/JH373A)
MSR958(JH300A/JH301A)
MSR1002-4/1003-8S
MSR2003
MSR2004-24/2004-48
MSR3012/3024/3044/3064
MSR4060/4080
Follow these guidelines when you configure basic DHCP snooping:
•
Specify the ports connected to authorized DHCP servers as trusted ports to make sure that
DHCP clients can obtain valid IP addresses. The trusted ports and the ports connected to
DHCP clients must be in the same VLAN.
•
You can specify the following interfaces as trusted ports: Layer 2 Ethernet interfaces and Layer
2 aggregate interfaces. For more information about aggregate interfaces, see Layer 2—LAN
Switching Configuration Guide.
•
The DHCP snooping configuration on a Layer 2 Ethernet interface that has been added to an
aggregation group does not take effect unless the interface leaves the aggregation group.
•
DHCP snooping can work with QinQ to record VLAN tags for DHCP packets received from
clients. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.
To configure basic DHCP snooping:
Step
1. Enter system view.
2. Enable DHCP snooping.
3. Enter interface view.
4. Specify the port as a trusted
port.
5. Return to system view.
6. Enter interface view.
7. (Optional.) Enable the
recording of DHCP snooping
entries.
Command
system-view
dhcp snooping enable
interface interface-type
interface-number
dhcp snooping trust
quit
interface interface-type
interface-number
dhcp snooping binding
record
94
DHCP snooping entry recording
compatibility
No
No
Yes
Yes
Yes
Yes
Yes
Remarks
N/A
By default, DHCP snooping is
disabled.
This interface must connect to the
DHCP server.
By default, all ports are untrusted
ports after DHCP snooping is
enabled.
N/A
This interface must connect to the
DHCP client.
By default, the recording of DHCP
snooping entries is disabled.