Dynamic Ipv4Sg Using Dhcp Snooping Configuration Example - HPE FlexNetwork MSR Series Configuration Manual
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (861 pages) ,
- Comware 7 layer 3 - ip services configuration manuals (554 pages) ,
- Comware 5 security configuration manual (547 pages)
Table of Contents
Advertisement
[DeviceA-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceA-GigabitEthernet1/0/1] quit
2.
Configure Device B:
# Configure an IP address for each interface. (Details not shown.)
# Enable IPv4SG on GigabitEthernet 1/0/2.
<DeviceB> system-view
[DeviceB] interface gigabitethernet 1/0/2
[DeviceB-GigabitEthernet1/0/2] ip verify source ip-address mac-address
[DeviceB-GigabitEthernet1/0/2] quit
# On GigabitEthernet 1/0/2, configure a static IPv4SG binding for Host A.
[DeviceB] interface gigabitethernet 1/0/2
[DeviceB-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceB-GigabitEthernet1/0/2] quit
# Enable IPv4SG on GigabitEthernet 1/0/1.
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On GigabitEthernet 1/0/1, configure a static IPv4SG binding for Host B.
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] ip source binding mac-address 0001-0203-0407
[DeviceB-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify that the static IPv4SG bindings are configured successfully on Device A.
<DeviceA> display ip source binding static
Total entries found: 2
IP Address
192.168.0.1
192.168.0.3
# Verify that the static IPv4SG bindings are configured successfully on Device B.
<DeviceB> display ip source binding static
Total entries found: 2
IP Address
192.168.0.1
N/A
Dynamic IPv4SG using DHCP snooping configuration
example
Network requirements
As shown in
Perform the following tasks:
•
Enable DHCP snooping on the device to make sure the DHCP clients obtain IP addresses from
the authorized DHCP server. To generate DHCP snooping entries for the DHCP clients, enable
recording of client information in DHCP snooping entries.
MAC Address
0001-0203-0405 GE1/0/2
0001-0203-0406 GE1/0/1
MAC Address
0001-0203-0406 GE1/0/2
0001-0203-0407 GE1/0/1
Figure
198, the host (the DHCP client) obtains an IP address from the DHCP server.
Interface
Interface
612
VLAN Type
N/A
Static
N/A
Static
VLAN Type
N/A
Static
N/A
Static
Advertisement
Table of Contents
Troubleshooting
