H3C交换机DHCP环境禁止手动修改IP 2020-04-11 网络 暂无评论 4683 次阅读 1、DHCP环境 在某些网络环境下禁止手动修改IP，防止地址冲突。为此禁止手动修改IP也可以在交换机上实现。具体参考如下： ``` #开启DHCP Snooping并且添加信任接口 [H3C]dhcp snooping enable [H3C]interface GigabitEthernet 1/0/8 [H3C-GigabitEthernet1/0/8]dhcp snooping trust [H3C-GigabitEthernet1/0/8]quit ``` ``` #将连接终端的物理接口开启dhcp snooping表绑定记录功能并检查ip与mac绑定关系。 [H3C]interface GigabitEthernet 1/0/5 [H3C-GigabitEthernet1/0/5]dhcp snooping binding record [H3C-GigabitEthernet1/0/5]ip verify source ip-address mac-address [H3C-GigabitEthernet1/0/5]quit ``` ``` #查看dhcp snooping绑定关系 [H3C]display ip source binding dhcp-snooping Total entries found: 1 IP Address MAC Address Interface VLAN Type 192.168.1.103 b00c-d16b-c771 GE1/0/5 1 DHCP snooping ``` 2、DHCP中继环境 ``` #配置中继 [H3C]dhcp enable [H3C-Vlan-interface10]ip address 192.168.10.252 24 [H3C-Vlan-interface10]dhcp select relay [H3C-Vlan-interface10]dhcp relay server-address 192.168.10.254 [H3C-Vlan-interface10]quit ``` ``` #配置记录和开启验证 [H3C]dhcp relay client-information record #记录dhcp中继表项 [H3C]interface Vlan-interface 10 [H3C-Vlan-interface10]ip verify source ip-address mac-address #启动绑定关系 [H3C-Vlan-interface10]quit ``` ``` #验证配置 [H3C]display ip source binding dhcp-relay Total entries found: 1 IP Address MAC Address Interface VLAN Type 192.168.10.1 b00c-d16b-c771 Vlan10 10 DHCP relay ``` 转自https://blog.csdn.net/zdl244/java/article/details/103645778 标签: dhcp, h3c 本作品采用 知识共享署名-相同方式共享 4.0 国际许可协议 进行许可。