HP VPN Firewall Appliances Network Management Configuration Guide

183
[Firewall-dhcp-pool-1] static-bind ip-address 10.1.1.6.25
[Firewall-dhcp-pool-1] static-bind mac-address 000f-e200-01c0
[Firewall-dhcp-pool-1] dns-list 10.1.1.2
[Firewall-dhcp-pool-1] gateway-list 10.1.1.126
Verifying the configuration
Router A can obtain IP address 10.1.1.5 and other network parameters, and Router B can obtain IP
address 10.1.1.6 and other network parameters from Firewall. You can use the display dhcp server
ip-in-use command on the DHCP server to view the IP addresses assigned to the clients.
Dynamic IP address allocation configuration example
Network requirements
As shown in Figure 110, the DHCP server (Firewall) assigns IP address to clients on subnet 10.1.1.0/24,
w h i c h i s s u b n e t t e d i n t o 10 .1.1. 0 / 25 a n d 10 .1.1.12 8 / 25 .
The IP addresses of GigabitEthernet 0/1 and GigabitEthernet 0/2 on Firewall are 10.1.1.1/25 and
10 .1.1.12 9 / 25 r e s p e c t i v e l y.
In subnet 10.1.1.0/25, the address lease duration is ten days and twelve hours, the domain name suffix
is aabbcc.com, the DNS server address is 10.1.1.2/25, the WINS server address is 10.1.1.4/25, and the
gateway address is 10.1.1.126/25.
In the subnet 10.1.1.128/25, the address lease duration is five days, the domain name suffix is
aabbcc.com, the DNS server address is 10.1.1.2/25, and the gateway address is 10.1.1.254/25. There
is no WINS server address.
The domain name suffix and DNS server address on subnets 10.1.1.0/25 and 10.1.1.128/25 are the
same. Therefore, the domain name suffix and DNS server address need to be configured only for subnet
10 .1.1. 0 / 24 . S u b n e t 10 .1.1. 0 / 2 5 a n d 10 .1.1.12 8 / 2 5 c a n i n h e r i t t h e c o n f i g u r a t i o n o f s u b n e t 10 .1.1. 0 / 24 .
Figure 110 Network diagram
Configuration procedure
1. Specify IP addresses for interfaces. (Details not shown.)
2. Configure the DHCP server:
# Enable DHCP.
<Firewall> system-view
[Firewall] dhcp enable