华为ensp---DHCP SNOOPING实验

场景：企业内部有独立的DHCP服务器，但是需要跨三层分配地址给终端。

解决办法：三层交换机开启DHCP SNOOPING

拓扑图

交换机配置：
因为AR中没有192.168.20.0和192.168.40.0的路由表，所以在AR中要添加静态路由

[SW1]vlan batch 20 30 40  
[SW1]interface Vlanif20
[SW1]ip address 192.168.20.1 255.255.255.0
[SW1]dhcp select relay
[SW1]dhcp relay server-ip 192.168.30.254
[SW1]interface Vlanif30
[SW1]ip address 192.168.30.1 255.255.255.0
[SW1]interface Vlanif40
[SW1]ip address 192.168.40.1 255.255.255.0
[SW1]dhcp select relay
[SW1]dhcp relay server-ip 192.168.30.254
[SW1]interface GigabitEthernet0/0/1
[SW1]port link-type access
[SW1]port default vlan 20
[SW1]dhcp snooping enable
[SW1]interface GigabitEthernet0/0/2
[SW1]port link-type access
[SW1]port default vlan 30
[SW1]dhcp snooping trusted
[SW1]interface GigabitEthernet0/0/4
[SW1]port link-type access
[SW1]port default vlan 40
[SW1]dhcp snooping enable

DHCP服务器配置（AR代替）

[SW1]dhcp enable
[SW1]ip pool vlan20
[SW1]gateway-list 192.168.20.1 
[SW1]network 192.168.20.0 mask 255.255.255.0 
[SW1]excluded-ip-address 192.168.20.254 
[SW1]dns-list 8.8.8.8 
[SW1]ip pool vlan40
[SW1]gateway-list 192.168.40.1 
[SW1]network 192.168.40.0 mask 255.255.255.0 
[SW1]dns-list 8.8.8.8 
[SW1]interface GigabitEthernet0/0/0
[SW1]ip address 192.168.30.254 255.255.255.0 
[SW1]dhcp select global
[SW1]ip route-static 192.168.20.0 255.255.255.0 192.168.30.1
[SW1]ip route-static 192.168.40.0 255.255.255.0 192.168.30.1

结果：终端成功获得地址