R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

142
Examples
# Enable unauthorized DHCP server detection.
<Sysname> system-view
[Sysname] dhcp server detect
dhcp server forbidden-ip
Syntax
dhcp server forbidden-ip low-ip-address [ high-ip-address ]
undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]
View
System view
Default level
2: System level
Parameters
low-ip-address: Start IP address of the IP address range to be excluded from dynamic allocation.
high-ip-address: End IP address of the IP address range to be excluded from dynamic allocation. The end
IP address must have a higher sequence than the start one.
Description
Use dhcp server forbidden-ip to exclude IP addresses from dynamic allocation.
Use undo dhcp server forbidden-ip to remove the configuration.
By default, all IP addresses in a DHCP address pool are assignable except IP addresses of the DHCP
server interfaces.
• When you use the dhcp server forbidden-ip command to exclude an IP address that is bound to a
user from dynamic assignment, the address can be still assigned to the user.
• When you use the undo dhcp server forbidden-ip command to remove the configuration, the
specified address/address range must be consistent with the one specified with the dhcp server
forbidden-ip command. If you have configured to exclude an address range from dynamic
assignment, you need to specify the same address range in the undo dhcp server forbidden-ip
command instead of specifying one IP address.
• Using the dhcp server forbidden-ip command repeatedly can exclude multiple IP address ranges
from allocation.
Related commands: display dhcp server forbidden-ip, dhcp server ip-pool, network, and static-bind
ip-address.
Examples
# Exclude the IP address range 10.110 .1.1 t o 10 .110.1.63 from dynamic allocation.
<Sysname> system-view
[Sysname] dhcp server forbidden-ip 10.110.1.1 10.110.1.63