Dhcp Snooping Configuration Task List; Configuring Basic Dhcp Snooping - H3C MSR 2600 Configuration Manual

Table 4 Handling strategies
If a DHCP request
has...
Option 82
No Option 82

DHCP snooping configuration task list

Tasks at a glance
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)

Configuring basic DHCP snooping

Follow these guidelines when you configure basic DHCP snooping:
• Specify the ports connected to authorized DHCP servers as trusted ports to make sure that DHCP
clients can obtain valid IP addresses. The trusted ports and the ports connected to DHCP clients must
be in the same VLAN.
Layer 2 Ethernet interfaces can be specified as trusted ports.
•
DHCP snooping can work with QinQ to record VLAN tags for DHCP packets received from clients.
•
For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.
To configure basic DHCP snooping:
Step
1. Enter system view.
2. Enable DHCP snooping.
3. Enter interface view.
Handling
strategy
Drop
Keep
Replace
N/A
Configuring basic DHCP snooping
Configuring Option 82
Saving DHCP snooping entries
Enabling DHCP starvation attack protection
Enabling DHCP-REQUEST attack protection
Configuring DHCP packet rate limit
DHCP snooping...
Drops the message.
Forwards the message without changing Option 82.
Forwards the message after replacing the original Option 82 with
the Option 82 padded according to the configured padding format,
padding content, and code type.
Forwards the message after adding the Option 82 padded
according to the configured padding format, padding content, and
code type.
Command
system-view
dhcp snooping enable
interface interface-type
interface-number
71
Remarks
N/A
By default, DHCP snooping is
disabled.
This interface must connect to the
DHCP server.