R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

175
Applying an extended address pool on an interface
After you create an extended address pool and apply it on an interface, the DHCP server, upon receiving
a client's request on the interface, attempts to assign the client the statically bound IP address first and
then an IP address from the specified address pool. If no IP address is available, address allocation fails,
and the DHCP server will not assign the client any IP address from other address pools.
To apply an extended address pool on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Apply an extended
address pool on the
interface.
dhcp server apply ip-pool
pool-name
Optional.
By default, the DHCP server has no
extended address pool applied on its
interface, and assigns an IP address
from a common address pool to a
requesting client.
NOTE:
Only an extended address pool can be applied on the interface. The address pool to be referenced mus
t
already exist.
Configuring the DHCP server security functions
Configuration prerequisites
Before performing this configuration, complete the following configurations on the DHCP server:
• Enable DHCP
• Configure the DHCP address pool
Enabling unauthorized DHCP server detection
Unauthorized DHCP servers on a network may assign wrong IP addresses to DHCP clients.
With unauthorized DHCP server detection enabled, the DHCP server checks whether a DHCP request
contains Option 54 (Server Identifier Option). If yes, the DHCP server records the IP address in the option,
which is the IP address of the DHCP server that assigned an IP address to the DHCP client and records
the receiving interface. The administrator can use this information to check for unauthorized DHCP
servers.
To enable unauthorized DHCP server detection:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable unauthorized DHCP
server detection.
dhcp server detect Disabled by default.