R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101
133
2. Configuration procedure
a. Specify IP addresses for interfaces (omitted)
b. Configure the DHCP server
# Enable DHCP.
<Firewall> system-view
[Firewall] dhcp enable
# Enable the DHCP server on GigabitEthernet 0/1 and GigabitEthernet 0/2.
[Firewall] interface GigabitEthernet 0/1
[Firewall-GigabitEthernet0/1] dhcp select server global-pool
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface GigabitEthernet 0/2
[Firewall-GigabitEthernet0/2] dhcp select server global-pool
[Firewall-GigabitEthernet0/2] quit
# Exclude IP addresses from dynamic allocation (addresses of the DNS server, WINS server, and
gateways).
[Firewall] dhcp server forbidden-ip 10.1.1.2
[Firewall] dhcp server forbidden-ip 10.1.1.4
[Firewall] dhcp server forbidden-ip 10.1.1.126
[Firewall] dhcp server forbidden-ip 10.1.1.254
# Configure DHCP address pool 0 (subnet, client domain name suffix, and DNS server address).
[Firewall] dhcp server ip-pool 0
[Firewall-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.0
[Firewall-dhcp-pool-0] domain-name aabbcc.com
[Firewall-dhcp-pool-0] dns-list 10.1.1.2
[Firewall-dhcp-pool-0] quit
# Configure DHCP address pool 1 (subnet, gateway, WINS server, and lease duration).
[Firewall] dhcp server ip-pool 1
[Firewall-dhcp-pool-1] network 10.1.1.0 mask 255.255.255.128
[Firewall-dhcp-pool-1] gateway-list 10.1.1.126
[Firewall-dhcp-pool-1] expired day 10 hour 12
[Firewall-dhcp-pool-1] nbns-list 10.1.1.4
[Firewall-dhcp-pool-1] quit
# Configure DHCP address pool 2 (subnet, gateway and lease duration).
[Firewall] dhcp server ip-pool 2
[Firewall-dhcp-pool-2] network 10.1.1.128 mask 255.255.255.128
[Firewall-dhcp-pool-2] expired day 5
[Firewall-dhcp-pool-2] gateway-list 10.1.1.254
c. Verification
A f t e r t h e p r e c e d i n g c o n f i g u r a t i o n i s c o m p l e t e , c l i e n t s o n n e t w o r k s 10 .1.1. 0 / 2 5 a n d 10 .1.1.128 / 2 5 c a n
obtain IP addresses on the corresponding network and other network parameters from Firewall. You can
use the display dhcp server ip-in-use command on the DHCP server to view the IP addresses assigned to
the clients.
Self-defined option configuration example
1. Network requirements