325
Figure 122 Network diagram
Switch
Vlan-int 100
Vlan-int 200
10.1.1.1/24
Host
MAC: 0001-0203-0406
DHCP serverDHCP relay agentDHCP client
Configuration procedure
1. Configure the IPv4 source guard function.
# Configure the IP addresses of the interfaces. (Details not shown)
# Configure the IPv4 source guard binding function on VLAN-interface 100 to filter packets based on
both the source IP address and MAC address.
<Switch> system-view
[Switch] vlan 100
[Switch-Vlan100] quit
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip verify source ip-address mac-address
[Switch-Vlan-interface100] quit
2. Configure the DHCP relay agent.
# Enable the DHCP service.
[Switch] dhcp enable
# Configure the IP address of the DHCP server.
[Switch] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to work in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[Switch-Vlan-interface100] dhcp relay server-select 1
[Switch-Vlan-interface100] quit
Verifying the configuration
# Display the generated IPv4 source guard binding entries.
[Switch] display ip source binding
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 100 Vlan100 DHCP-RLY
Static IPv6 source guard binding entry configuration example
Network requirements
As shown in Figure 123, the host is connected to port Ethernet 1/0/1 of the device. Configure a static
IPv6 source guard binding entry for Ethernet 1/0/1 of the device to allow only packets from the host to
pass.
To Next Page
Loading...
Need help?
General