Enabling Dhcp Snooping - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
After the packet discarding alarm function is enabled, an alarm is generated when the number
of discarded packets on the S3700 reaches the alarm threshold.
Pre-configuration Tasks
Before configuring the packet discarding alarm function, complete the following tasks:
l
l
l
l
l
l
Data Preparation
To configure the packet discarding alarm function, you need the following data.
No.
1

3.8.2 Enabling DHCP Snooping

After DHCP snooping is enabled globally, it must be enabled on an interface or in a VLAN.
Otherwise, DHCP snooping does not take effect.
Context
To enable DHCP snooping, you need to comply with the following sequence:
l
l
l
Procedure
l
Issue 01 (2011-07-15)
Configuring the DHCP server
Configuring the DHCP relay agent
Configuring the S3700 to discard DHCP Reply messages on the untrusted interface at the
user side
Configuring the checking of DHCP messages
Configuring the checking of the CHADDR field in DHCP Request messages
Configuring the checking of the rate of sending DHCP messages
Enable DHCP globally.
Enable DHCP snooping globally.
Enable DHCP snooping on an interface or in a VLAN.
Enabling DHCP snooping in the VLAN view
1. Run:
system-view
The system view is displayed.
2. Run:
dhcp enable
DHCP is enabled globally.
3. Run:
dhcp snooping enable
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
Data
Alarm threshold for the number of discarded
packets
114