Configuring The Dhcp Relay Agent Security Functions - H3C LS-3100-52P-OVS-H3 Operation Manual

To do...
Correlate the DHCP server
group with the current interface
You can specify up to twenty DHCP server groups on the relay agent and eight DHCP server
addresses for each DHCP server group.
The IP addresses of DHCP servers and those of relay agent's interfaces cannot be on the same
subnet. Otherwise, the client cannot obtain an IP address.
A DHCP server group can correlate with one or multiple DHCP relay agent interfaces, while a relay
agent interface can only correlate with one DHCP server group. Using the dhcp relay
server-select command repeatedly overwrites the previous configuration. However, if the
specified DHCP server group does not exist, the interface still uses the previous correlation.
The group-id argument in the dhcp relay server-select command was specified by the dhcp
relay server-group command.

Configuring the DHCP Relay Agent Security Functions

Creating static bindings and enable IP address check
The DHCP relay agent can dynamically record clients' IP-to-MAC bindings after clients get IP
addresses. It also supports static bindings, which means you can manually configure IP-to-MAC
bindings on the DHCP relay agent, so that users can access external network using fixed IP addresses.
For avoidance of invalid IP address configuration, you can configure the DHCP relay agent to check
whether a requesting client's IP and MAC addresses match a binding (both dynamic and static bindings)
on the DHCP relay agent. If not, the client cannot access outside networks via the DHCP relay agent.
Follow these steps to create a static binding and enable IP address check:
To do...
Enter system view
Create a static binding
Enter interface view
Enable invalid IP
address check
Use the command...
dhcp relay server-select
group-id
Use the command...
system-view
dhcp relay security static ip-address
mac-address [ interface interface-type
interface-number ]
interface interface-type
interface-number
dhcp relay address-check { disable |
enable }
3-5
Remarks
Required
By default, no interface is
correlated with any DHCP
server group.
Remarks
—
Optional
No static binding is created
by default.
—
Required
Disabled by default.