H3C交换机DHCP环境禁止手动修改IP

1、DHCP环境

在某些网络环境下禁止手动修改IP，防止地址冲突。为此禁止手动修改IP也可以在交换机上实现。具体参考如下：

#开启DHCP Snooping并且添加信任接口

[H3C]dhcp snooping enable

[H3C]interface GigabitEthernet 1/0/8

[H3C-GigabitEthernet1/0/8]dhcp snooping trust

[H3C-GigabitEthernet1/0/8]quit

#将连接终端的物理接口开启dhcp snooping表绑定记录功能并检查ip与mac绑定关系。

[H3C]interface GigabitEthernet 1/0/5

[H3C-GigabitEthernet1/0/5]dhcp snooping binding record

[H3C-GigabitEthernet1/0/5]ip verify source ip-address mac-address

[H3C-GigabitEthernet1/0/5]quit

#查看dhcp snooping绑定关系

[H3C]display ip source binding dhcp-snooping

Total entries found: 1

IP Address MAC Address Interface VLAN Type

192.168.1.103 b00c-d16b-c771 GE1/0/5 1 DHCP snooping

2、DHCP中继环境

#配置中继

[H3C]dhcp enable

[H3C-Vlan-interface10]ip address 192.168.10.252 24

[H3C-Vlan-interface10]dhcp select relay

[H3C-Vlan-interface10]dhcp relay server-address 192.168.10.254

[H3C-Vlan-interface10]quit

#配置记录和开启验证

[H3C]dhcp relay client-information record #记录dhcp中继表项

[H3C]interface Vlan-interface 10

[H3C-Vlan-interface10]ip verify source ip-address mac-address #启动绑定关系

[H3C-Vlan-interface10]quit

#验证配置

[H3C]display ip source binding dhcp-relay

Total entries found: 1

IP Address MAC Address Interface VLAN Type

192.168.10.1 b00c-d16b-c771 Vlan10 10 DHCP relay