HP 6125XLG R2306-HP 6125XLG Blade Switch Layer 3 - IP Services Configuration G - Page 76

Configuring Option 82

Page 76 highlights

Step 1. Enter system view. Command system-view 2. Enable DHCP snooping. dhcp snooping enable 3. Enter interface view. interface interface-type interface-number 4. Specify the port as a trusted port. dhcp snooping trust 5. Return to system view. 6. Enter interface view. quit interface interface-type interface-number 7. (Optional.) Enable recording of DHCP snooping entries. dhcp snooping binding record Remarks N/A By default, DHCP snooping is disabled. This interface is connected to the DHCP server. By default, all ports are untrusted ports after DHCP snooping is enabled. N/A This interface is connected to the DHCP client. By default, after DHCP snooping is enabled, recording of DHCP snooping entries is disabled. Configuring Option 82 Follow these guidelines when you configure Option 82: • If you configure Option 82 on an Ethernet interface that has been added to an aggregation group, the settings do not take effect unless the interface is removed from the aggregation group. • To support Option 82, you must configure Option 82 on both the DHCP server and the DHCP snooping device. For information about configuring Option 82 on the DHCP server, see "Enabling handling of Option 82." • If the handling strategy is configured as replace, you must configure a padding format for Option 82. If the handling strategy is keep or drop, there is no need to configure any padding format. • If Option 82 contains the device name, the device name must contain no spaces. Otherwise, DHCP snooping drops the message. You can use the sysname command to specify the device name. For more information about this command, see Fundamentals Command Reference. • If DHCP snooping and QinQ work together or DHCP snooping receives a DHCP packet with two VLAN tags, and the verbose padding format is adopted for Option 82, DHCP snooping fills the VLAN ID field of sub-option 1 with outer VLAN tag.inner VLAN tag. For example, if the outer VLAN tag is 10 (a in hexadecimal) and the inner VLAN tag is 20 (14 in hexadecimal), the VLAN ID is 000a.0014. To configure DHCP snooping to support Option 82: Step 1. Enter system view. 2. Enter interface view. 3. Enable DHCP snooping to support Option 82. Command system-view interface interface-type interface-number dhcp snooping information enable Remarks N/A N/A By default, DHCP snooping does not support Option 82. 67

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230

67
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable DHCP snooping.
dhcp snooping enable
By default, DHCP snooping is
disabled.
3.
Enter interface view.
interface
interface-type
interface-number
This interface is connected to the
DHCP server.
4.
Specify the port as a trusted
port.
dhcp snooping trust
By default, all ports are untrusted
ports after DHCP snooping is
enabled.
5.
Return to system view.
quit
N/A
6.
Enter interface view.
interface
interface-type
interface-number
This interface is connected to the
DHCP client.
7.
(Optional.) Enable recording
of DHCP snooping entries.
dhcp snooping binding record
By default, after DHCP snooping is
enabled, recording of DHCP
snooping entries is disabled.
Configuring Option 82
Follow these guidelines when you configure Option 82:
If you configure Option 82 on an Ethernet interface that has been added to an aggregation group,
the settings do not take effect unless the interface is removed from the aggregation group.
To support Option 82, you must configure Option 82 on both the DHCP server and the DHCP
snooping device. For information about configuring Option 82 on the DHCP server, see "
Enabling
handling of Option 82
."
If the handling strategy is configured as
replace
, you must configure a padding format for Option
82. If the handling strategy is
keep
or
drop
, there is no need to configure any padding format.
If Option 82 contains the device name, the device name must contain no spaces. Otherwise, DHCP
snooping drops the message. You can use the
sysname
command to specify the device name. For
more information about this command, see
Fundamentals Command Reference
.
If DHCP snooping and QinQ work together or DHCP snooping receives a DHCP packet with two
VLAN tags, and the verbose padding format is adopted for Option 82, DHCP snooping fills the
VLAN ID field of sub-option 1 with outer VLAN tag.inner VLAN tag. For example, if the outer VLAN
tag is 10 (a in hexadecimal) and the inner VLAN tag is 20 (14 in hexadecimal), the VLAN ID is
000a.0014.
To configure DHCP snooping to support Option 82:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type interface-number
N/A
3.
Enable DHCP snooping to
support Option 82.
dhcp snooping information enable
By default, DHCP snooping
does not support Option
82.