Configuring Basic Dhcp Snooping Features In A Common Network - HPE FlexNetwork 10500 Series Configuration Manual

DHCP snooping can work with QinQ to record VLAN tags for DHCP packets received from clients.
For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.
In a VXLAN network, an Ethernet service instance uses the DHCP snooping configuration (except
the trusted port configuration) of the Layer 2 Ethernet interface where the Ethernet service instance
is on. For more information about Ethernet service instances, see VXLAN Configuration Guide.
In a VXLAN network, the AC can forward DHCP packets to other ports in the same isolation group if
you perform the following tasks:
•
Use the dhcp snooping trust command to configure the AC as the trusted interface.
•
Assign all ports where the AC resides to the same isolation group. For more information about
port isolation, see Layer 2—LAN Switching Configuration Guide.
Configuring basic DHCP snooping features in a common
network
About basic DHCP snooping features in a common network
Basic DHCP snooping features refer to the following features:
•
Enabling DHCP snooping.
•
Configuring DHCP snooping trusted ports.
•
Enabling recording client information in DHCP snooping entries.
If you enable DHCP snooping globally, DHCP snooping is enabled on all interfaces on the device.
You can also enable DHCP snooping for specific VLANs. After enabling DHCP snooping for a VLAN,
you can configure the other basic DHCP snooping features in the VLAN.
Restrictions and guidelines
If the basic DHCP snooping features are configured globally, you can only use the undo form of the
global configuration commands to disable the settings globally. The VLAN-specific configuration
commands cannot disable the settings.
If the basic DHCP snooping features are configured in a VLAN, you can only use the undo form of
the VLAN-specific configuration commands to disable the settings in the VLAN. The global
configuration command cannot disable the settings.
Configuring basic DHCP snooping features globally
Step
1. Enter system view.
2. Enable DHCP snooping
globally.
3. Enter interface view.
4. Specify the port as a trusted
port.
5. Return to system view.
6. Enter interface view.
7. (Optional.) Enable the
recording of DHCP snooping
entries.
Command
system-view
dhcp snooping enable
interface interface-type
interface-number
dhcp snooping trust
quit
interface interface-type
interface-number
dhcp snooping binding
record
93
Remarks
N/A
By default, DHCP snooping is
disabled globally.
This interface must connect to the
DHCP server.
By default, all ports are untrusted
ports after DHCP snooping is
enabled.
N/A
This interface must connect to the
DHCP client.
By default, the recording of DHCP
snooping entries is disabled.