R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

55
To specify a DHCP server address on a relay agent:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Specify a DHCP server address
on the relay agent.
dhcp relay server-address
ip-address
By default, no DHCP server
address is specified on the relay
agent.
Configuring the DHCP relay agent security
functions
Enabling the DHCP relay agent to record relay entries
Perform this task to enable the DHCP relay agent to automatically record clients' IP-to-MAC bindings
(relay entries) after they obtain IP addresses through DHCP.
Some security functions, such as ARP address check, authorized ARP, and IP source guard, use the
recorded relay entries to check incoming packets and block packets that do not match any entry. In this
way, illegal hosts are not able to access external networks through the relay agent.
To enable the DHCP relay agent to record relay entries:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable the relay agent to
record relay entries.
dhcp relay client-information record
By default, the relay agent
does not record relay entries.
NOTE:
The DHCP relay agent does not record IP-to-MAC bindings for DHCP clients running on
synchronous/asynchronous serial interfaces.
Enabling periodic refresh of dynamic relay entries
A DHCP client unicasts a DHCP-RELEASE message to the DHCP server to release its IP address. The
DHCP relay agent conveys the message to the DHCP server and does not remove the IP-to-MAC entry of
the client.
With this feature, the DHCP relay agent uses the following information to periodically send a
DHCP-REQUEST message to the DHCP server:
• The IP address of a relay entry.
• The MAC address of the DHCP relay interface.
The relay agent maintains the relay entries depending on what it receives from the DHCP server: