H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – DHCP
H3C S7500 Series Ethernet Switches Chapter 3
DHCP Relay Agent Configuration
3-6
accessing external networks if the IP address configured on the user end and the
MAC address of the user end do not match any entries (including the entries
dynamically tracked by the DHCP relay agent and the manually configured static
entries) in the user address table on the DHCP relay agent.
Follow these steps to configure address checking:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a DHCP user
address entry manually
dhcp-security static
ip-address mac-address
Optional
By default, no DHCP user
address entry is
configured
Enter interface view
interface interface-type
interface-number
—
Enable the address
checking function
address-check enable
Required
By default, the address
checking function is
disabled
II. Configuring dynamic entries
Through this configuration task, you can validate or invalidate the dynamic IP-to-MAC
mapping entries generated by the DHCP relay agent. DHCP client addresses are
matched based on the dynamic entries generated by DHCP relay agent only after
these entries are activated; otherwise, DHCP client addresses are matched based
only on the security address entries statically configured.
Follow these steps to configure dynamic entries generated by DHCP relay agents:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter VLAN
interface view
interface interface-type
interface-number
—
Validate the
dynamic entries
generated by the
DHCP relay agent
address-check
dhcp-relay enable
Optional
By default, the dynamic
IP-to-MAC mapping entries
generated by the DHCP relay
agent are valid
This configuration will take effect only after the address checking function of the
DHCP relay agent on the VLAN interface is enabled.