锐捷ruijie交换机supvlan+dhcp snooping+dhcp option82配置案例
发表时间:2022-08-28 01:23:36
文章来源:超级管理员
浏览次数:725
需求:
1)5750 supvlan 168,subvlan 1681--1688,subvlan指定ip的范围
2)5750上面做dhcp relay,服务器能根据不同的subvlan分配不同范围的ip
3)5750需要开启dhcp snooping,DAI,防dhcp欺骗,防arp欺骗
vlan 168
name Stu17
supervlan
subvlan 1681-1688
!
vlan 1681
name vlan168Sub1
subvlan-address-range 192.168.52.1 192.168.52.10
!
vlan 1682
name vlan168Sub2
subvlan-address-range 192.168.52.11 192.168.52.20
!
vlan 1683
subvlan-address-range 192.168.52.21 192.168.52.30
!
vlan 1684
subvlan-address-range 192.168.52.31 192.168.52.40
!
service dhcp
ip helper-address 202.201.29.248
!
ip dhcp snooping verify mac-address
ip dhcp snooping information option
ip dhcp snooping
!
ip arp inspection vlan 1681-1688
!
interface GigabitEthernet 0/1
switchport access vlan 1681