Optional) Enabling Detection Of Bogus Dhcp Servers; Checking The Configuration - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
The prerequisite for the dhcp snooping trusted interface command to take effect is the interface
is added to the VLAN.
----End

3.3.4 (Optional) Enabling Detection of Bogus DHCP Servers

Before enabling detection of bogus DHCP servers, ensure that DHCP snooping is enabled
globally and on the interface. Otherwise, the detection function does not take effect.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
dhcp server detect
Detection of bogus DHCP servers is enabled.
By default, detection of bogus DHCP servers is disabled on the S3700.
----End

3.3.5 Checking the Configuration

Checking the Configuration of Preventing the Bogus DHCP Server Attack.
Prerequisite
The configurations of preventing the bogus DHCP server attack are complete.
Procedure
l
l
l
l
----End
Issue 01 (2011-07-15)
Run the display dhcp snooping global command to check information about global DHCP
snooping.
Run the display dhcp snooping interface interface-type interface-number command to
check information about DHCP snooping on the interface.
Run the display dhcp { snooping | static } user-bind { dai-status | interface interface-
type interface-number | ip-address ip-address | ipsg-status | mac-address mac-address |
vlan vlan-id [ interface interface-type interface-number ] | all [ verbose ] }command to
check the information about DHCP bind-table.
Run the display dhcpv6 { snooping | static } user-bind { interface interface-type
interface-number | ip-address ip-address | ipsg-status | mac-address mac-address |
vlan vlan-id [ interface interface-type interface-number ] | all [ verbose ] } command to
check the information about DHCPv6 bind-table.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
95