R3303-HP HSR6800 Routers Layer 3 - IP Services Configuration Guide
iii
Solution ··································································································································································· 52
Configuring the DHCP relay agent ··························································································································· 53
Overview ········································································································································································· 53
Fundamentals ························································································································································· 53
DHCP relay agent support for Option 82 ·········································································································· 54
DHCP relay agent configuration task list ····················································································································· 55
Enabling DHCP ······························································································································································ 55
Enabling the DHCP relay agent on an interface ········································································································ 55
Correlating a DHCP server group with a relay agent interface················································································ 56
Configuring the DHCP relay agent security functions ································································································ 57
Configuring address check ·································································································································· 57
Configuring periodic refresh of dynamic client entries ····················································································· 58
Configuring the DHCP relay agent to work with authorized ARP ···································································· 58
Enabling unauthorized DHCP server detection ·································································································· 59
Enabling DHCP starvation attack protection ······································································································ 59
Enabling client offline detection ··································································································································· 60
Configuring the DHCP relay agent to release an IP address ···················································································· 61
Configuring the DHCP relay agent to handle Option 82 ·························································································· 61
Displaying and maintaining the DHCP relay agent ··································································································· 62
DHCP relay agent configuration examples ················································································································· 63
DHCP relay agent configuration example ·········································································································· 63
DHCP relay agent Option 82 support configuration example ········································································· 64
Troubleshooting DHCP relay agent configuration ······································································································ 65
Symptom ································································································································································· 65
Analysis ·································································································································································· 65
Solution ··································································································································································· 65
Configuring DHCP client ··········································································································································· 66
Introduction to DHCP client ··········································································································································· 66
Enabling the DHCP client on an interface ··················································································································· 66
Displaying and maintaining the DHCP client ·············································································································· 66
DHCP client configuration example ····························································································································· 67
Network requirements ··········································································································································· 67
Configuration procedure ······································································································································ 67
Verifying the configuration ··································································································································· 68
Configuring DHCP snooping ····································································································································· 70
Overview ········································································································································································· 70
Application of trusted and untrusted ports ·········································································································· 71
DHCP snooping support for Option 82 ·············································································································· 72
DHCP snooping configuration task list ························································································································ 73
Configuring DHCP snooping basic functions ·············································································································· 73
Configuring DHCP snooping to support Option 82 ··································································································· 74
Configuring DHCP snooping entries backup ·············································································································· 76
Enabling DHCP starvation attack protection ··············································································································· 76
Enabling DHCP-REQUEST message attack protection ······························································································· 77
Displaying and maintaining DHCP snooping ············································································································· 78
DHCP snooping configuration example ······················································································································ 78
Network requirements ··········································································································································· 78
Configuration procedure ······································································································································ 79
DHCP snooping Option 82 support configuration example ····················································································· 79
Network requirements ··········································································································································· 79
Configuration procedure ······································································································································ 79