H3C S7500 Series Operation Manual page 646

Operation Manual – DHCP
H3C S7500 Series Ethernet Switches
accessing external networks if the IP address configured on the user end and the
MAC address of the user end do not match any entries (including the entries
dynamically tracked by the DHCP relay agent and the manually configured static
entries) in the user address table on the DHCP relay agent.
Follow these steps to configure address checking:
Enter system view
Create a DHCP user
address entry manually
Enter interface view
Enable the address
checking function
II. Configuring dynamic entries
Through this configuration task, you can validate or invalidate the dynamic IP-to-MAC
mapping entries generated by the DHCP relay agent. DHCP client addresses are
matched based on the dynamic entries generated by DHCP relay agent only after
these entries are activated; otherwise, DHCP client addresses are matched based
only on the security address entries statically configured.
Follow these steps to configure dynamic entries generated by DHCP relay agents:
To do...
Enter system view
Enter VLAN
interface view
Validate the
dynamic entries
generated by the
DHCP relay agent
This configuration will take effect only after the address checking function of the
DHCP relay agent on the VLAN interface is enabled.
To do...
system-view
dhcp-security static
ip-address mac-address
interface interface-type
interface-number
address-check enable
Use the command...
system-view
interface interface-type
interface-number
address-check
dhcp-relay enable
Chapter 3 DHCP Relay Agent Configuration
Use the command...
—
—
Optional
By default, the dynamic
IP-to-MAC mapping entries
generated by the DHCP relay
agent are valid
3-6
Remarks
—
Optional
By default, no DHCP user
address entry is
configured
—
Required
By default, the address
checking function is
disabled
Remarks