R3102-R3103-HP 6600/HSR6600 Routers Layer 2 - LAN Switching Configuration Guide

187
Complete the following tasks to configure many-to-one VLAN mapping:
Task Remarks
Enabling DHCP snooping Enables DHCP snooping globally (required).
Enabling ARP detection in SVLANs Enables ARP detection in all SVLANs (required).
Configuring an uplink policy Configures an uplink policy for the customer-side port (required).
Configuring the customer-side port
Configures VLAN and other settings required for many-to-one
VLAN mapping (required).
Configuring the network-side port
Configures VLAN and other settings required for many-to-one
VLAN mapping (required).
Configuration prerequisites
Before configuring many-to-one VLAN mapping:
• Make sure all enterprise department users obtain IP addresses through DHCP. For information
about assigning IP addresses through DHCP, see Layer 3—IP Services Configuration Guide.
• Create CVLANs and SVLANs, and plan CVLANs-to-SVLAN mappings.
Enabling DHCP snooping
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable DHCP snooping.
dhcp-snooping By default, DHCP snooping is disabled.
Enabling ARP detection in SVLANs
The ARP detection function enables a switch to modify the VLAN attributes of ARP packets, which is
impossible under the normal ARP packet processing procedure. For more information about ARP
detection, see Security Configuration Guide.
To enable ARP detection in all SVLANs:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VLAN view.
vlan vlan-id N/A
3. Enable ARP detection.
arp detection enable
By default, ARP detection is
disabled.
To defend against ARP attacks, enable ARP detection also in all CVLANs.