Configuring An Interface As A Trusted Interface - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
----End

3.3.3 Configuring an Interface as a Trusted Interface

Generally, the interface connected to the DHCP server is configured as trusted and other
interfaces are configured as untrusted.
Context
After DHCP snooping is enabled on an interface, the interface is an untrusted interface by default.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
The interface is the network-side interface connected to the DHCP server.
Or, run:
vlan vlan-id
The VLAN view is displayed.
Step 3 In the interface view, Run:
dhcp snooping trusted
Or, in the VLAN view, run: dhcp snooping trusted interface interface-type interface-
number
The interface is configured as a trusted interface.
DHCP Reply messages sent from an untrusted interface are discarded.
Issue 01 (2011-07-15)
system-view
The system view is displayed.
2. Run:
dhcp enable
DHCP is enabled globally.
3. Run:
dhcp snooping enable
DHCP snooping is enabled globally.
4. Run:
interface interface-type interface-number
The interface view is displayed.
5. Run: dhcp snooping enableDHCP snooping is enabled on an interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
94