HP 3600 v2 series Configuration Manual page 209

CAUTION:
Before changing VLAN mappings on a port, clear all DHCP snooping entries by using the reset
dhcp-snooping command (see
Configuration prerequisites
Before configuring many-to-one VLAN mapping:
Make sure that all home users obtain IP addresses through DHCP. For how to assign IP addresses
•
through DHCP, see Layer 3—IP Services Configuration Guide.
Create CVLANs and SVLANs, and plan CVLANs-to-SVLAN mappings.
•
Enabling DHCP snooping
Follow these steps to enable DHCP snooping:
To do...
Enter system view
Enable DHCP snooping
Enabling ARP detection in SVLANs
The ARP detection function enables a switch to modify the VLAN attributes of ARP packets, which is
impossible under the normal ARP packet processing procedure. For more information about ARP
detection, see Security Configuration Guide.
Follow these steps to enable ARP detection in all SVLANs:
To do...
Enter system view
Enter VLAN view
Enable ARP detection
NOTE:
To defend against ARP attacks, enable ARP detection also in all CVLANs.
Configuring an uplink policy
Follow these steps to configure an uplink policy to map a group of CVLANs to one SVLAN:
To do...
Enter system view
Create a class and enter class
view
Configure multiple CVLANs as
match criteria
Return to system view
Layer 3—IP Services Command Reference
Use the command...
system-view
dhcp-snooping
Use the command...
system-view
vlan vlan-id
arp detection enable
Use the command...
system-view
traffic classifier tcl-name operator
or
if-match customer-vlan-id
{ vlan-id-list | vlan-id1 to vlan-id2 }
quit
201
).
Remarks
—
Required
Disabled by default.
Remarks
—
––
Required
Disabled by default.
Remarks
—
Required
Repeat these steps to configure one
class for each group of CVLANs.