R3303-HP HSR6800 Routers Security Configuration Guide

Router B must use the IP address and MAC address in the authorized ARP entry to communicate

with Router A. Otherwise, the communication fails. Thus user validity is ensured.

Authorized ARP configuration example (on a DHCP relay

agent)

Network requirements

Configure Router A as a DHCP server with an IP address pool of 10.10.1.0/24.

Configure Router B as a DHCP relay agent. Enable authorized ARP on GigabitEthernet 3/0/2 of Router

B to ensure user validity.

Configure Router C as a DHCP client to obtain an IP address.

Figure 139 Network diagram

Configuration procedure

1. Configure Router A:

# Configure the IP address of GigabitEthernet 3/0/1.

<RouterA> system-view

[RouterA] interface gigabitethernet 3/0/1

[RouterA-GigabitEthernet3/0/1] ip address 10.1.1.1 24

[RouterA-GigabitEthernet3/0/1] quit

# Configure DHCP.

[RouterA] dhcp enable

[RouterA] dhcp server ip-pool 1

[RouterA-dhcp-pool-1] network 10.10.1.0 mask 255.255.255.0

[RouterA-dhcp-pool-1] gateway-list 10.10.1.1

[RouterA-dhcp-pool-1] quit

[RouterA] ip route-static 10.10.1.0 24 10.1.1.2

2. Configure Router B:

# Enable DHCP.

<RouterB> system-view

[RouterB] dhcp enable

# Configure the IP addresses of GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2.

[RouterB] interface gigabitethernet 3/0/1