配置IPSG禁止使用静态IP接入
原创
©著作权归作者所有:来自51CTO博客作者a371933136的原创作品,请联系作者获取转载授权,否则将追究法律责任
###---华为接入配置,仅配置需要的业务VLAN-###
dhcp snooping enable
#
vlan 10
dhcp snooping enable
dhcp snooping trusted interface GigabitEthernet1/0/1
ip source check user-bind enable
vlan 20
dhcp snooping enable
dhcp snooping trusted interface GigabitEthernet1/0/1
ip source check user-bind enable
#
###---华三接入配置###
dhcp snooping enable
//上联口配置
interface GigabitEthernet1/0/1
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
dhcp snooping trust
//接入口配置
interface GigabitEthernet1/0/2
ip verify source ip-address mac-address
dhcp snooping binding record