R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module

141

142

143

144

145

146

147

148

149

150

132

[Firewall-dhcp-pool-0] static-bind client-identifier

3030-3066-2e65-3230-302e-3030-3032-2d45-7468-6572-6e65-7430-2f30

[Firewall-dhcp-pool-0] dns-list 10.1.1.2

[Firewall-dhcp-pool-0] gateway-list 10.1.1.126

[Firewall-dhcp-pool-0] quit

# Create DHCP address pool 1, and configure a static binding, DNS server and gateway in it.

[Firewall] dhcp server ip-pool 1

[Firewall-dhcp-pool-1] static-bind ip-address 10.1.1.6

[Firewall-dhcp-pool-1] static-bind mac-address 000f-e200-01c0

[Firewall-dhcp-pool-1] dns-list 10.1.1.2

[Firewall-dhcp-pool-1] gateway-list 10.1.1.126

c. Verification

After the preceding configuration is complete, Router A can obtain IP address 10.1.1.5 and other network

parameters, and Router B can obtain IP address 10.1.1.6 and other network parameters from Firewall.

You can use the display dhcp server ip-in-use command on the DHCP server to view the IP addresses

assigned to the clients.

Dynamic IP address assignment configuration example

1. Network requirements

• As shown in Figure 63, the

DHCP server (Firewall) assigns IP address to clients on subnet

10 .1.1. 0 / 24 , w h i c h i s s u b n e t t e d i n t o 10 .1.1. 0 / 2 5 a n d 10 .1.1.12 8 / 2 5 .

• The IP addresses of GigabitEthernet 0/1 and GigabitEthernet 0/2 on Firewall are 10.1.1.1/25 and

10 .1.1.12 9 / 2 5 r e s p e c t i v e l y.

• In subnet 10.1.1.0/25, the address lease duration is ten days and twelve hours, domain name suffix

aabbcc.com, DNS server address 10.1.1.2/25, WINS server address 10.1.1.4/25, and gateway

address 10.1.1.126/25.

• In the subnet 10.1.1.128/25, the address lease duration is five days, domain name suffix

aabbcc.com, DNS server address 10.1.1.2/25, and gateway address 10.1.1.254/25 and there is

no WINS server address.

• The domain name suffix and DNS server address on subnets 10.1.1.0/25 and 10.1.1.128/25 are the

same. Therefore, the domain name suffix and DNS server address need to be configured only for

s u b n e t 10 .1.1. 0 / 24 . S u b n e t 10 .1.1. 0 / 2 5 a n d 10 .1.1.12 8 / 2 5 c a n i n h e r i t t h e c o n f i g u r a t i o n o f s u b n e t

10 .1.1. 0 / 2 4 .

Figure 63 DHCP network