Enterasys Enterasys SecureStack B2 B2G124-24 Spécifications Page 499

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 600
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 498
set dhcpsnooping binding
SecureStack B2 Configuration Guide 18-7
Defaults
Bydefault,portsareuntrusted.
Mode
Switchcommand,readwrite.
Usage
InorderforDHCPsnoopingtooperate,snoopinghastobeenabledgloballyandonspecific
VLANs,andtheportswithintheVLANshavetobeconfiguredastrustedoruntrusted.On
trustedports,DHCPclientmessagesareforwardeddirectlybythehardware.Onuntrustedports,
clientmessagesaregivento
theDHCPsnoopingapplication.
TheDHCPsnoopingapplicationbuildsthebindingsdatabasefromclientmessagesreceivedon
untrustedports.DHCPsnoopingcreatesa“tentativebinding”fromDHCPDISCOVERand
REQUESTmessages.Tent ativebindingstieaclienttotheportonwhichthemessagepacketwas
received.Tentativebindingsarecompletedwhen
DHCPsnoopinglearnstheclient’sIPaddress
fromaDHCPACKmessageonatrustedport.
TheportsontheswitchthroughwhichDHCPserversarereachedmustbeconfiguredastrusted
portssothatpacketsreceivedfromthoseportswillbeforwardedtoclients.DCHPpacketsfroma
DHCP
server(DHCPOFFER,DHCPACK,DHCPNAK)aredroppedifreceivedonanuntrusted
port.
Example
Thisexampleconfiguresportge.1.1asatrustedport.
B2
(rw)->set dhcpsnooping trust port ge.1.1 enable
set dhcpsnooping binding
UsethiscommandtoaddastaticDHCPbindingtotheDHCP snoopingdatabase.
Syntax
set dhcpsnooping binding mac-address vlan vlan-id ipaddr port port-string
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
enable|disable Enablesordisablesthespecifiedportsastrustedports.
macaddress SpecifiestheMACaddressofthebindingentry.
vlanvlanid SpecifiestheVLANofthebindingentry.
ipaddr SpecifiestheIPaddressofthebindingentry.
portportstring Specifiestheportofthebindingentry.
Vue de la page 498
1 2 ... 494 495 496 497 498 499 500 501 502 503 504 ... 599 600

Commentaires sur ces manuels

Pas de commentaire