Dhcp Security Configuration; Prerequisites; Configuring Private Dhcp Server Detecting - H3C S7500 Series Operation Manual

Operation Manual – DHCP
H3C S7500 Series Ethernet Switches
Enter system view
Configure
customize
d options

2.4 DHCP Security Configuration

DHCP security configuration is needed to ensure the security of DHCP service.

2.4.1 Prerequisites

Before configuring DHCP security, you should first complete the DHCP server
configuration (either global address pool-based or interface address pool-based
DHCP server configuration).

2.4.2 Configuring Private DHCP Server Detecting

A private DHCP server on a network also answers IP address request packets and
assigns IP addresses to DHCP clients. However, the IP addresses they assigned may
conflict with those of other hosts. As a result, users cannot normally access networks.
This kind of DHCP servers are known as private DHCP servers.
With the private DHCP server detecting function enabled, when a DHCP client sends
the DHCP-REQUEST packet, the DHCP server tracks the information (such as the IP
addresses and interfaces) of DHCP servers to enable the administrator to detect
private DHCP servers in time and take proper measures.
Follow these steps to enable detection of a private DHCP server:
To do...
system-view
interface interface-type
interface-number
Configure
dhcp server option code { ascii
the current
ascii-string | hex hex-string&<1-10> |
interface
ip-address ip-address&<1-8> }
quit
dhcp server option code { ascii
Configure
ascii-string | hex hex-string&<1-10> |
multiple
ip-address ip-address&<1-8> }
interfaces
{ interface interface-type
in system
interface-number [ to interface-type
view
interface-number ] | all }
Chapter 2 DHCP Server Configuration
Use the command...
2-16
Remarks
—
Required
By default,
no
customized
option is
configured