Configuring Dhcp Relay Agent Security Functions - 3Com 4500 PWR 26-Port Configuration Manual

You can configure up to eight DHCP server IP addresses in a DHCP server group.
You can map multiple VLAN interfaces to one DHCP server group. But one VLAN interface can be
mapped to only one DHCP server group.
If you execute the dhcp-se
the previous one
You need to configure the group number specified in the dhcp-server groupNo command in VLAN
interface view by

Configuring DHCP Relay Agent Security Functions

Configuring address checking
After relaying an IP address from the DHCP server to a DHCP client, the DHCP relay agent can
automatically record the client's IP-to-MAC binding and generate a dynamic address entry. It also
supports st tic bindings, which means you can manually configure IP-to-MAC bindings on the DHCP a
relay agent, so that users can access external network using fixed IP addresses.
The purpose of the address checking function on DHCP relay agent is to prevent unauthorized users
from statically configuring IP addresses to access external networks. With this fun
DHCP relay agent inhibits a user from accessing external networks if the IP address configured on the
use r end and the MAC address of the user end do not match any entries (including the entries
dyn amically tracked by the DHCP relay agent and the manually configu
address table on the DHCP relay agent.
F ollow these steps to configure address checking:
To do...
Enter system view
Create a static
IP-to-MAC binding
Enter interface view
Enable the address
checking function
rver groupNo comman
.
using the command dhcp-serv
Use the command...
system-view
dhcp-security static
ip-address mac-address
interface interface-type
interface-number
address-check enable
d repeatedly, the ne
er grou pNo ip ip-address&<1-8
—
Optional
Not created by default.
—
Required
Disabled by default.
40-6
w configura tion overwrites
> in advance.
ction enabled, a
red static entries) in the user
Remarks