华为设备DHCP中继的实现

5.2.2 DHCP中继的实现
在本实验中，我们对网络做出改造，SW2作为核心交换设备转发任务已经较重，现在把DHCP服务割接到SW3上；SW2上作为两个部门，即VLAN10和VLAN20的网关，同时作为DHCP中继设备。拓扑图如5-11所示，其中SW2上的10.1.1.254和10.1.2.254为2个终端的网关地址，DHCP实施在SW3，地址为10.1.3.254，SW2上和SW3通信的地址为VLAN30地址10.1.3.1.

图5-11 DHCP中继实施示意图
步骤1.网络改造，本步骤的重点在于SW3和VLAN10以及VLAN20网关的通信
SW2：
[sw2]interface Vlanif20
[sw2-Vlanif20] ip address 10.1.2.254 255.255.255.0 //VLAN20的网关地址从SW3割接到SW2。
[sw2]vlan 30
[sw2]int vlan 30
[sw2-Vlanif30]ip address 10.1.3.1 24 //创建VLAN30接口作为和SW3互联的3层IP地址
[sw2-Vlanif30]description CONN2SW3
[sw2]interface Vlanif 10
[sw2-Vlanif10]undo dhcp select interface //拿掉SW2上原先实施的基于接口的DHCP配置
Warning: There are IP addresses allocated in the pool. Are you sure to delete the pool?[Y/N]:y
//拿掉SW2上的DHCP配置，统一把DHCP放到SW3上
SW3:
[SW3-Vlanif20]undo dhcp select global //拿掉SW3上的vlan20接口的DHCP配置，以进行网络改造
[SW3]undo interface Vlanif 20 //拿掉VLAN20的地址
Vlan 30
interface Vlanif30
ip address 10.1.3.254 255.255.255.0 //创建VLAN30，用于和SW2的3层地址通信
SW3上静态路由：
[SW3]ip route-static 10.1.1.0 24 Vlanif 30 10.1.3.1 //由于DHCP服务器需要单播把offer等报文转发到SW2的VLANIF10和20，所以单播路由是必须的。此处网络较小，可以直接使用静态路由
[SW3]ip route-static 10.1.2.0 24 Vlanif 30 10.1.3.1
路由验证和数据通信验证如下所示：
<SW3>display ip routing-table protocol static
Route Flags: R - relay, D - download to fib

Public routing table : Static
Destinations : 2 Routes : 2 Configured Routes : 2

Static routing table status : <Active>
Destinations : 2 Routes : 2

Destination/Mask Proto Pre Cost Flags NextHop Interface

   10.1.1.0/24  Static  60   0           D   10.1.3.1        Vlanif30
   10.1.2.0/24  Static  60   0           D   10.1.3.1        Vlanif30

Static routing table status : <Inactive>
Destinations : 0 Routes : 0
<SW3>ping 10.1.1.254
PING 10.1.1.254: 56 data bytes, press CTRL_C to break
Reply from 10.1.1.254: bytes=56 Sequence=1 ttl=255 time=50 ms
Reply from 10.1.1.254: bytes=56 Sequence=2 ttl=255 time=60 ms
Reply from 10.1.1.254: bytes=56 Sequence=3 ttl=255 time=30 ms
Reply from 10.1.1.254: bytes=56 Sequence=4 ttl=255 time=50 ms
Reply from 10.1.1.254: bytes=56 Sequence=5 ttl=255 time=50 ms

--- 10.1.1.254 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/48/60 ms

<SW3>ping 10.1.2.254
PING 10.1.2.254: 56 data bytes, press CTRL_C to break
Reply from 10.1.2.254: bytes=56 Sequence=1 ttl=255 time=10 ms
Reply from 10.1.2.254: bytes=56 Sequence=2 ttl=255 time=40 ms
Reply from 10.1.2.254: bytes=56 Sequence=3 ttl=255 time=50 ms
Reply from 10.1.2.254: bytes=56 Sequence=4 ttl=255 time=20 ms
Reply from 10.1.2.254: bytes=56 Sequence=5 ttl=255 time=40 ms

--- 10.1.2.254 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/32/50 ms
步骤2.对DHCP的改造
拿掉SW2的DHCP配置，SW2作为DHCP中继代理，SW3统一作为DHCP服务器
[sw2]dhcp enable
[sw2]dhcp server group Ender //创建DHCP服务器组，该组中可以配置多个DHCP服务器用以让客户端选择，此处仅仅配置一个
[sw2-dhcp-server-group-ender]dhcp-server 10.1.3.254 //指定DHCP服务器地址
[sw2]int vlan 10
[sw2-Vlanif10]dhcp select relay //VLAN10的网关作为DHCP中继角色
[sw2-Vlanif10]dhcp relay server-select Ender //DHCP中继使用Ender的服务器组，注意华为VRP会自动把自定义的名字改为小写
[sw2]interface Vlanif 20
[sw2-Vlanif20]dhcp select relay
[sw2-Vlanif20]dhcp relay server-select Ender //VLANIF20的配置和VLANIF10相同
SW3：
interface Vlanif30
dhcp select global //SW3的VLANIF30使用全局DHCP方式
ip pool qyt-vlan10 //把SW2的vlan10的DHCP移到SW3，当然SW3上并没有删除之前的针对VLAN20的DHCP地址池配置。
gateway-list 10.1.1.254
network 10.1.1.0 mask 255.255.255.0
excluded-ip-address 10.1.1.250 10.1.1.253
lease day 2 hour 0 minute 0
dns-list 114.114.114.114 8.8.8.8
domain-name ender.com
ip pool qyt-vlan20
gateway-list 10.1.2.254
network 10.1.2.0 mask 255.255.255.0
excluded-ip-address 10.1.2.250 10.1.2.253
lease day 2 hour 0 minute 0
dns-list 113.113.113.113 7.7.7.7
domain-name ender.com
验证DHCP中继
[sw2]display dhcp relay all
DHCP relay agent running information of interface Vlanif10 :
Server group name : ender //服务器组名称
Gateway address in use : 10.1.1.254 //用户侧正在使用中继的地址

DHCP relay agent running information of interface Vlanif20 :
Server group name : ender
Gateway address in use : 10.1.2.254
请释放DHCP客户端的地址，注意为了避免不必要的麻烦，请在终端上应用静态IP实施，然后再选择回DHCP的方式（请不要忘记点应用哦），如图5-12所示，图5-13表明客户端已经正确的从远端服务器获得相关信息。

图5-12 DHCP客户端实施

图5-13 客户端正常获得地址
图5-14为DHCP中继的一个真实单播报文，读者可以用该图对比5.2.1小节中DHCP中继的工作过程。

图5-14 DHCP中继中用到的单播报文

转载于:https://blog.51cto.com/enderjoe/2046363