Huawei Quidway S9300 Configuration Manual page 98

2 DHCP Snooping Configuration
# Enable the alarm function for checking the rate of sending packets and set the alarm threshold
for checking the rate of sending packets.
[Quidway] dhcp snooping check dhcp-rate alarm enable
[Quidway] dhcp snooping check dhcp-rate alarm threshold 80
Step 8 Associate ARP with DHCP snooping.
# The system sends the ARP packet to probe the IP address that expires within the aging time
in the DHCP snooping entry and does not exist in the ARP entry. If no user is detected within
the specified number of detection times, the system deletes the binding relation in the DHCP
binding table and notifies the DHCP server to release the IP address.
[Quidway] arp dhcp-snooping-detect enable
Step 9 Verify the configuration.
Run the display dhcp snooping global command on the S9300, and you can view that DHCP
snooping is enabled globally. You can also view the statistics on alarms.
[Quidway] display dhcp snooping global
dhcp snooping enable
dhcp snooping check dhcp-rate enable
dhcp snooping check dhcp-rate alarm enable
dhcp snooping check dhcp-rate 90
dhcp snooping check dhcp-rate alarm threshold 80
Run the display dhcp snooping interface command, and you can view information about DHCP
snooping on the interface.
[Quidway] display dhcp snooping interface gigabitethernet 1/0/0
dhcp snooping enable
dhcp snooping alarm untrust-reply enable
dhcp snooping alarm untrust-reply threshold 120
dhcp snooping check mac-address enable
dhcp snooping alarm mac-address enable
dhcp snooping alarm mac-address threshold 120
dhcp snooping check user-bind enable
dhcp snooping alarm user-bind enable
dhcp snooping alarm user-bind threshold 120
user-bind total
mac-address&src mac total
untrust-reply total
[Quidway] display dhcp snooping interface gigabitethernet 2/0/0
dhcp snooping enable
dhcp snooping trusted
user-bind total
mac-address&src mac total
untrust-reply total
Run the display user-bind user-type static command, and you can view the static binding
entries of users.
[Quidway] display user-bind user-type static
bind-table:
ifname
-------------------------------------------------------------------------------
GE1/0/1
-------------------------------------------------------------------------------
total count :
Run the display dhcp option82 interface command, and you can view the configuration of
Option 82 on the interface.
2-42
0
0
0
0
0
0
p/cvlan tp lease
0010/0000 S 0
1
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
mac-address ip-address
vpn-instance
0001-0002-0003 010.001.001.001
Issue 01 (2009-07-28)