H3C交换机DHCP环境禁止手动修改IP

H3C交换机DHCP环境禁止手动修改IP

1、DHCP环境

在某些网络环境下禁止手动修改IP，防止地址冲突。为此禁止手动修改IP也可以在交换机上实现。具体参考如下：
#开启DHCP Snooping并且添加信任接口
[H3C]dhcp snooping enable
[H3C]interface GigabitEthernet 1/0/8
[H3C-GigabitEthernet1/0/8]dhcp snooping trust
[H3C-GigabitEthernet1/0/8]quit

#将连接终端的物理接口开启dhcp snooping表绑定记录功能并检查ip与mac绑定关系。
[H3C]interface GigabitEthernet 1/0/5
[H3C-GigabitEthernet1/0/5]dhcp snooping binding record
[H3C-GigabitEthernet1/0/5]ip verify source ip-address mac-address
[H3C-GigabitEthernet1/0/5]quit

#查看dhcp snooping绑定关系
[H3C]display ip source binding dhcp-snooping
Total entries found: 1
IP Address MAC Address Interface VLAN Type
192.168.1.103 b00c-d16b-c771 GE1/0/5 1 DHCP snooping

2、DHCP中继环境

#配置中继
[H3C]dhcp enable
[H3C-Vlan-interface10]ip address 192.168.10.252 24
[H3C-Vlan-interface10]dhcp select relay
[H3C-Vlan-interface10]dhcp relay server-address 192.168.10.254
[H3C-Vlan-interface10]quit

#配置记录和开启验证
[H3C]dhcp relay client-information record #记录dhcp中继表项
[H3C]interface Vlan-interface 10
[H3C-Vlan-interface10]ip verify source ip-address mac-address #启动绑定关系
[H3C-Vlan-interface10]quit

#验证配置
[H3C]display ip source binding dhcp-relay
Total entries found: 1
IP Address MAC Address Interface VLAN Type
192.168.10.1 b00c-d16b-c771 Vlan10 10 DHCP relay

---