h3c级联的交换机怎么配置dhcp snooping h3c交换机怎么阻止非法DHCP？
h3c\u7684S5500\u5982\u4f55\u52a0\u5165\u6216\u53d6\u6d88dhcp-snooping trust\u6a21\u5f0f\uff1f\u3000\u3000\u4f60\u597d\uff1a
\u3000\u3000\u53d6\u6d88\u539f\u6765trunk\u53e3\u7684dhcp-snooping trust\u6a21\u5f0f\uff0c\u547d\u4ee4\u5982\u4e0b\uff1a
\u3000\u3000int XXX #\u8fdb\u5165\u539f\u6765trunk\u53e3
\u3000\u3000undodhcp-snooping trust #\u53d6\u6d88dhcp-snooping trust\u529f\u80fd
\u3000\u3000quit #\u9000\u51fa\u63a5\u53e3\u6a21\u5f0f
\u3000\u3000S3100\u4ea4\u6362\u673a
\u3000\u3000\u9700\u8981\u6ce8\u610f\u7684\u662f\uff1a
\u3000\u3000 l S3100\u7cfb\u5217\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u4e2d\uff0c\u53ea\u6709S3100-EI\u7cfb\u5217\u652f\u6301\u6b64\u547d\u4ee4\u3002
\u3000\u3000 l \u5f00\u542fDHCP Snooping\u529f\u80fd\u540e\uff0c\u4e3a\u4e86\u4f7fDHCP\u5ba2\u6237\u7aef\u80fd\u4ece\u5408\u6cd5\u7684DHCP\u670d\u52a1\u5668\u83b7\u53d6IP\u5730\u5740\uff0c\u5fc5\u987b \u5c06\u4e0e\u5408\u6cd5DHCP\u670d\u52a1\u5668\u76f8\u8fde\u7684\u7aef\u53e3\u8bbe\u7f6e\u4e3a\u4fe1\u4efb\u7aef\u53e3\uff0c\u4e14\u8bbe\u7f6e\u7684\u4fe1\u4efb\u7aef\u53e3\u548c\u4e0eDHCP\u5ba2\u6237\u7aef\u76f8\u8fde \u7684\u7aef\u53e3\u5fc5\u987b\u5728\u540c\u4e00\u4e2aVLAN\u5185\u3002
\u9632DHCP\u670d\u52a1\u5668\u4eff\u5192\u529f\u80fd\u5178\u578b\u914d\u7f6e\u4e3e\u4f8bSwitch\u7684\u7aef\u53e3Ethernet1/0/1\u4e0eDHCP\u670d\u52a1\u5668\u7aef\u76f8\u8fde\uff0c\u7aef\u53e3Ethernet1/0/2\uff0cEthernet1/0/3\u5206\u522b\u4e0eDHCP Client A\u3001DHCP Client B\u76f8\u8fde\u3002\u5728Switch\u4e0a\u5f00\u542fDHCP Snooping\u529f\u80fd\u3002\u5728\u7aef\u53e3Ethernet1/0/2\uff0cEthernet1/0/3\u4e0a\u5f00\u542f\u9632DHCP\u670d\u52a1\u5668\u4eff\u5192\u529f\u80fd\u3002\u5f53\u7aef\u53e3Ethernet1/0/2\u4e0a\u53d1\u73b0\u4eff\u5192DHCP\u670d\u52a1\u5668\u65f6\uff0c\u53d1\u9001Trap\u4fe1\u606f\uff1b\u5f53\u7aef\u53e3Ethernet1/0/3\u4e0a\u53d1\u73b0\u4eff\u5192DHCP\u670d\u52a1\u5668\u65f6\uff0c\u8fdb\u884c\u7ba1\u7406down\u64cd\u4f5c\u3002\u4e3a\u4e86\u907f\u514d\u653b\u51fb\u8005\u5bf9\u63a2\u6d4b\u62a5\u6587\u8fdb\u884c\u7b56\u7565\u8fc7\u6ee4\uff0c\u914d\u7f6eSwitch\u4e0a\u9632DHCP\u670d\u52a1\u5668\u4eff\u5192\u529f\u80fd\u53d1\u9001\u63a2\u6d4b\u62a5\u6587\u7684\u6e90MAC\u5730\u5740\u4e3a000f-e200-1111\uff08\u4e0d\u540c\u4e8e\u4ea4\u6362\u673a\u7684\u6865MAC\u5730\u5740\uff09\u3002# \u5f00\u542fDHCP Snooping\u529f\u80fd\u3002 system-viewEnter system view, return to user view with Ctrl+Z.[Switch] dhcp-snooping # \u914d\u7f6e\u9632DHCP\u670d\u52a1\u5668\u4eff\u5192\u7684\u62a5\u6587\u53d1\u9001\u7684\u6e90MAC\u5730\u5740\u4e3a000f-e200-1111\u3002[Switch] dhcp-snooping server-guard source-mac 000f-e200-1111# \u5728\u7aef\u53e3Ethernet1/0/2\u4e0a\u4f7f\u80fd\u9632DHCP\u670d\u52a1\u5668\u529f\u80fd\u3002[Switch] interface ethernet1/0/2[Switch-Ethernet1/0/2] dhcp-snooping server-guard enable# \u5728\u7aef\u53e3Ethernet1/0/2\u4e0a\u914d\u7f6e\u9632DHCP\u670d\u52a1\u5668\u7b56\u7565\u4e3a\u53d1\u9001Trap\u3002[Switch-Ethernet1/0/2] dhcp-snooping server-guard method trap[Switch-Ethernet1/0/2] quit# \u5728\u7aef\u53e3Ethernet1/0/3\u4e0a\u4f7f\u80fd\u9632DHCP\u670d\u52a1\u5668\u529f\u80fd\u3002[Switch] interface ethernet1/0/3[Switch-Ethernet1/0/3] dhcp-snooping server-guard enable# \u5728\u7aef\u53e3Ethernet1/0/3\u4e0a\u914d\u7f6e\u9632DHCP\u670d\u52a1\u5668\u7b56\u7565\u4e3ashutdown\u3002[Switch-Ethernet1/0/3] dhcp-snooping server-guard method shutdown\u6709\u4e9b\u4ea4\u6362\u673a\u4e0d\u652f\u6301\u8fd9\u79cd\u64cd\u4f5c\uff0c\u53ef\u4ee5\u5f00\u542fdhcp snooping\u540e\u5c06\u8fde\u4e86\u5408\u6cd5dhcp\u7684\u7aef\u53e3\u8bbe\u4e3atrust\u3002
[SwitchB] interface ethernet 1/1
[SwitchB-Ethernet1/1] dhcp-snooping trust # 配置Ethernet1/1端口为信任端口。
绛旓細姣旇緝甯歌鐨勮法缃戞绠＄悊闂閫氬父鏈夊涓嬪嚑绉嶏細璺ㄧ綉娈甸檺鍒剁數鑴戠綉閫熴佽法缃戞鎺у埗鐢佃剳涓婄綉琛屼负锛堟瘮濡傜姝㈣繀闆蜂笅杞姐佺姝㈠湪绾跨帺娓告垙銆侀檺鍒跺湪绾跨湅瑙嗛銆佺姝笂鐝倰鑲°佺姝㈠伐浣滄椂闂寸綉璐瓑锛夛紝璺ㄧ綉娈电粦瀹氱數鑴慖P鍜孧AC鍦板潃锛岄槻姝㈢數鑴戜慨鏀笽P鍦板潃绛夎涓恒傚涓嬫槸鎴戠粰澶у鏁寸悊鐨h3c浜ゆ崲鏈烘庝箞鍘昏缃紝甯屾湜瀵瑰ぇ瀹舵湁鎵浣滅敤銆傛柟娉...
绛旓細4銆H3C涓夊眰浜ゆ崲鏈虹殑NAT閰嶇疆姝ラ濡備笅锛1锛岀3灞備氦鎹㈡満榛樿浣跨敤璺敱鍔熻兘銆傝繖瑕佹眰鍦ㄦ垜浠殑鎵嬫満涓婂惎鐢ㄧ3灞備氦鎹㈡満鐨勮矾鐢卞姛鑳姐2锛屽惎鐢ㄨ矾鐢卞姛鑳藉悗锛屾垜浠紑濮嬮厤缃3灞備氦鎹㈡満璺敱銆3锛屾祴璇曢厤缃紝棣栧厛娴嬭瘯鎵鏈夌鍙ｇ姸鎬佸拰ip鍦板潃銆5銆佷笂绾ц澶囦负鍏夌尗锛堝甫璺敱鍔熻兘锛変负渚嬶紝浣跨敤涓鏍圭綉绾挎彃鍏ヨ鍏夌尗鐨勭綉鍙ｃ傜綉绾跨殑...
绛旓細鍏跺疄涓嶅悓鍘傚鍨嬪彿鐨勪氦鎹㈡満璁剧疆閮芥槸宸笉澶氱殑,涓嬮潰缁欏ぇ瀹惰涓璇寸幇鍦ㄦ瘮杈冩祦琛岀殑鍗庝笁浜ゆ崲鏈虹殑绠鍗曡缃! 鍗庝笁浜ゆ崲鏈烘庝箞璁剧疆 姣旀柟璇,浣犱滑鍏徃鏂板鍔犱簡鍔炲叕瀹,缃戠粶绔彛涓嶅鐢ㄤ簡, 浣犱滑IT涓荤璁╀綘鍔犱竴涓氦鎹㈡満鍒版満鎴垮苟璁剧疆濂姐傞鍏堢殑鏉′欢鏄綘鍏徃鐨勭綉缁滄湁vlan鐨勫垝鍒(鍦ㄦ牳蹇冧氦鎹㈡満涓),姣斿璇磛lan 2 ,vlan 3,vlan4绛...
绛旓細H3C鏍稿績浜ゆ崲鏈洪厤缃 H3C姣忓勾灏嗛攢鍞鐨15%浠ヤ笂鐢ㄤ簬鐮斿彂鎶曞叆锛屽湪涓浗鐨勫寳浜佹澀宸炲拰娣卞湷璁炬湁鐮斿彂鏈烘瀯锛屽湪鍖椾含鍜屾澀宸炶鏈夊彲闈犳ц瘯楠屽浠ュ強浜у搧閴村畾娴嬭瘯涓績銆備互涓嬫槸鎴戞暣鐞嗙殑鍏充簬H3C鏍稿績浜ゆ崲鏈洪厤缃紝甯屾湜澶у璁ょ湡闃呰!1銆佹牳蹇冧氦鎹㈡満鏂板缓鐢ㄦ埛admin瀵嗙爜admin@h3c锛屽苟鍏宠仈杩滅▼鐧诲綍鏈嶅姟锛屽telnet web缃戦〉鐧诲綍銆乻sh杩滅▼...
绛旓細浜屻H3C浜ゆ崲鏈虹殑鍩烘湰閰嶇疆 鎴戜滑鍏堟潵浜嗚В涓h3c鐨勯厤缃鍛戒护涓庡姛鑳,閮芥槸甯哥敤鐨,鍩烘湰涓婂ぇ閮ㄥ垎缃戠粶閰嶇疆閮藉皯涓嶄簡杩欎簺鍛戒护銆 1銆佸熀鏈厤缃 //鐢ㄦ埛鐩磋妯″紡鎻愮ず绗,鐢ㄦ埛瑙嗗浘 system-view // 杩涘叆閰嶇疆瑙嗗浘 [H3C] sysname xxx //璁剧疆涓绘満鍚嶆垚涓簒xx杩欓噷浣跨敤淇敼鐗规潈鐢ㄦ埛瀵嗙爜 2銆佺敤鎴烽厤缃 system-view [H3C]super ...
绛旓細H3C閰嶇疆涓夊眰浜ゆ崲鏈4涓楠よ缁嗚В鏋 H3C璁よ瘉锛欻3C璁よ瘉鍩硅浣撶郴鍏呭垎鑰冭檻瀹㈡埛涓嶅悓灞傛鐨勯渶姹傦紝鑷村姏浜庝负鍏ㄧ悆瀹㈡埛鎻愪緵鍏ㄩ潰銆佷笓涓氥佹潈濞佺殑缃戠粶鎶鏈璇佸煿璁備笅闈㈡槸鎴戞暣鐞嗙殑鍏充簬H3C閰嶇疆涓夊眰浜ゆ崲鏈4涓楠よ缁嗚В鏋愶紝娆㈣繋澶у鍙傝!language-modechinese//鍒囨崲鍒颁腑鏂囨ā寮 system-view//杩涘叆绯荤粺瑙嗗浘 [H3C]displaycurrent-...
绛旓細鍦ㄧ郴缁熻瘯鍥綶H3C]涓嬶紝杈撳叆localuser XXX(WEB user name) XXX(WEB user password) 1(鏉冮檺锛屽綋璇ュ间负0鐨勬椂鍊欏彧鍏锋湁guest鏉冮檺锛1涓虹鐞嗗憳鏉冮檺)濡傦細涓虹郴缁熸坊鍔犱竴涓悕涓簍est锛屽瘑鐮佷负123锛屽叿鏈夌鐞嗗憳鏉冮檺鐨勭敤鎴 Localuser test 123 1 2.H3C浜ゆ崲鏈洪厤缃ip鍦板潃浠ュ強缃戝叧 鍏<>涓媠ys杩涘叆閰嶇疆鐣岄潰 鍥犱负鏄簩灞...
绛旓細H3C鏈洪厤缃涓夊眰浜ゆ崲鏈虹殑鍏蜂綋姝ラ H3C閰嶇疆涓夊眰浜ゆ崲鏈轰竴鍏辨湁4涓楠わ紝鍒嗗埆鏄垝鍒哣LAN锛屽苟鎻忚堪;缁橵LAN鍒掔綉鍏;缁橵LAN鎸囧畾绔彛;閰嶇疆璺敱鍗忚;锛屼笅闈㈡垜浠竴璧锋潵鐪嬬湅鍚!language-modechinese//鍒囨崲鍒颁腑鏂囨ā寮 system-view//杩涘叆绯荤粺瑙嗗浘 [H3C]displaycurrent-configuration//鏄剧ず褰撳墠閰嶇疆涓夊眰浜ゆ崲鏈 //浠ヤ笅寮濮嬮厤缃...
绛旓細鍓嶆彁鏄疘P鏄氱殑 sh ip arp IP鍦板潃 sh mac add add MAC鍦板潃 缁慖P锛宮ac permit ip host IP鍦板潃 mac host mac鍦板潃 鐪嬩簡“H3C浜ゆ崲鏈甯哥敤閰嶇疆鏁欑▼”杩樻兂鐪嬶細1. h3c浜ゆ崲鏈閰嶇疆姝ラ鏁欑▼ 2. H3C浜ゆ崲鏈烘湁鍝嚑绉嶉厤缃ā寮 3. 濡備綍閰嶇疆浜ゆ崲鏈vlan 4. 涓夊眰浜ゆ崲鏈洪厤缃殑瀹炰緥鏁欑▼ ...
绛旓細H3C浜ゆ崲鏈哄浣鍒濆鍖閰嶇疆 浣犵煡閬揌3C浜ゆ崲鏈哄浣曞垵濮嬪寲鍚?閰嶇疆鍛戒护鏄摢浜涘憿?涓嬮潰璺熸垜涓璧锋潵鐪嬬湅鍚! 1銆佽繛鎺ラ厤缃數缂 1.1 灏嗛厤缃數缂嗙殑DB-9瀛斿紡鎻掑ご鎺ュ埌瑕佸浜ゆ崲鏈鸿繘琛岄厤缃殑PC鐨勪覆鍙ｄ笂; 1.2 灏嗛厤缃數缂嗙殑 RJ-45 鐨勪竴绔繛鍒颁氦鎹㈡満鐨 Console 鍙ｄ笂銆 2銆佽缃粓绔弬鏁 2.1 鎵撳紑 PC,骞跺湪 PC 涓婅繍琛岀粓绔豢鐪熺▼...
