使用DHCP snooping 功能防止DHCP Server仿冒者***（华为交换机）
在全局视图和VLAN视图下使能DHCP Snooping。dhcp enable
dhcp snooping enable
vlan 11
dhcp snooping enable
配置端口vlan
interface Ethernet 0/0/1
port default vlan 11
interface Ethernet 0/0/2
port default vlan 11
在网络侧接口上配置Trusted模式
vlan 11
dhcp snooping trusted interface Ethernet 0/0/1
dhcpoption82 rebuild enable interface Ethernet 0/0/1 to 0/0/2
配置在用户侧的接口进行报文检查
dhcp snooping check dhcp-request enable
dhcp snooping check dhcp-chaddr enable
dhcp snooping check dhcp-rate enable
配置强制插入Option82选项
vlan 11
dhcpoption82 rebuild enable interface Ethernet 0/0/1 to 0/0/2
页:
[1]