Configuring Dhcp Server Security Functions; Prerequisites; Enabling Unauthorized Dhcp Server Detection - H3C S5600 Series Operation Manual

Operation Manual – DHCP
H3C S5600 Series Ethernet Switches
Follow these steps to customize the DHCP service:
Enter system view
Configure
customized
options
Caution:
Be cautious when configuring self-defined DHCP options because such configuration
may affect the DHCP operation process.

2.6 Configuring DHCP Server Security Functions

DHCP security configuration is needed to ensure the security of DHCP service.

2.6.1 Prerequisites

Before configuring DHCP security, you should first complete the DHCP server
configuration (either global address pool-based or interface address pool-based DHCP
server configuration).

2.6.2 Enabling Unauthorized DHCP Server Detection

If there is an unauthorized DHCP server in the network, when a client applies for an IP
address, the unauthorized DHCP server may assign an incorrect IP address to the
client.
With this feature enabled, when receiving a DHCP message with the siaddr field not
being 0 from a client, the DHCP server will record the value of the siaddr field and the
receiving interface. The administrator can use such information to check out any DHCP
unauthorized servers.
To do...
Configure the
current
interface
Configure
multiple
interfaces in
system view
Chapter 2 DHCP Server Configuration
Use the command...
system-view
interface interface-type
interface-number
dhcp server option code { ascii
ascii-string | hex hex-string&<1-10>
| ip-address ip-address&<1-8> }
quit
dhcp server option code { ascii
ascii-string | hex hex-string&<1-10>
| ip-address ip-address&<1-8> }
{ interface interface-type
interface-number [ to interface-type
interface-number ] | all }
2-30
Remarks
—
Required
By default,
no
customized
option is
configured.