路由-dhcp配置偽DHCP服務(wù)器檢測功能

DHCP配使能 DHCP服使能DHCP服dhcpDHCP服undodhcp配置偽DHCP服務(wù)器檢測功在網(wǎng)絡(luò)中，如果有私自架設(shè)的DHCP服務(wù)器，當(dāng)其他用戶申請IP地址時，這臺DHCP服務(wù)器就會與DHCP客戶端進(jìn)行交互，導(dǎo)致用戶獲得錯誤的IP地址，無法正常上網(wǎng)，這種私設(shè)的DHCP服務(wù)器稱為偽DHCP服務(wù)器?？梢耘渲脗蜠HCP服務(wù)器檢測功能，記錄DHCP服務(wù)器的IP地址和接口等信息，以便管理員及時發(fā)現(xiàn)并處理偽DHCP服務(wù)器。在系統(tǒng)視圖下進(jìn)行使能偽DHCPdhcpserver偽DHCPundodhcpserverDHCP服務(wù)器配（含子接口）、虛擬以太網(wǎng)接口、封裝PPP/HDLC/FR同/異步串口、E1將DHCP報文發(fā)送到本地DHCPdhcpselect將DHCP報文發(fā)送到本地DHCPdhcpselectundodhcpDHCP服務(wù)器配將DHCP報文發(fā)送到本地DHCP服務(wù)器，從全局地址池dhcpselectglobal{interfaceinterface-typenumber[tointerface-typeinterface-number]|all將DHCP報文發(fā)送到本地DHCPdhcpselectinterface{interfaceinterface-typenumber[tointerface-typeinterface-number]|allDHCP服務(wù)器配undodhcpselect{interfaceinterface-typenumber[tointerface-typeinterface-number|all缺省情況下，對DHCP全局地址池與接口地址全局地址池是通過系統(tǒng)視圖下的dhcpserverip-pool命令創(chuàng)建的，在本路由器范圍內(nèi)有效。IP地址及dhcpselectinterface命令后自動創(chuàng)建如果需要使用接口地址池，必須將對DHCP報文創(chuàng)建DHCP全局地址DHCP服務(wù)器通過地址池給用戶分配IP地址。當(dāng)客戶端向服務(wù)器發(fā)出DHCP請求時，DHCP服務(wù)地址與其他相關(guān)參數(shù)（如DNS服務(wù)器地址、地址租用期限等）一起傳送給客戶端。每個DHCP服務(wù)器可以配置多個地址池，VRP目前支持128個創(chuàng)建DHCP全局地址DHCP服務(wù)器中的地址池采用樹狀結(jié)構(gòu)：樹根是一些通用參數(shù)（如），只需要在自然網(wǎng)段或命令displaydhcpservertree查看，同一級別地創(chuàng)建DHCP全局地址創(chuàng)建DHCP地址池或進(jìn)入DHCPdhcpserverip-poolpool-刪除DHCPundodhcpserverip-poolpool-配置DHCP地址池的地址分方式，但不能對同一個DHCP地址池同時配置這某些客戶端可能需要固定的IP地址，即將客戶端的MAC地址或Identifier與某個IP地址綁定。當(dāng)此MAC地址或Identifier的客戶端申請DHCP地址時，服務(wù)器根據(jù)客戶端MAC地址或Identifier尋找到對應(yīng)的固定IP地址分配給客戶端。請在DHCP地址池視圖下進(jìn)行下列配置配置靜態(tài)綁定的IP地址static-bindip-addressip-address[masknetmask刪除靜態(tài)綁定的IPundostatic-bindip-配置靜態(tài)綁定的客戶端MAC地址或static-bind{mac-addressmac-address|client-client-identifier刪除靜態(tài)綁定的客戶端MAC地址或undostatic-bind{mac-address|client-identifier命令static-bindip-address和static-bind{mac-address|client-identifier}必須配合使用，并且，個MAC地址或Identifier對應(yīng)的靜態(tài)綁定僅允許dhcpserverstatic-bindip-addressip-{mac-addressmac-address|client-identifierclient-identifier}undodhcpserverstatic-bind{ip-addressip-address|mac-addressmac-address|client-identifierclient-identifier}配置動態(tài)地址分 請在DHCP配置動態(tài)分配的IPnetworkip-address[masknetmask刪除動態(tài)分配的IPundo配置DHCP地址池中不參與自動分配的IPDHCP服務(wù)器在分配地址時，需要排除已經(jīng)被占用的某些IP地址（如網(wǎng)關(guān)、FTP服務(wù)器等），否則，同一地址分配給兩臺主機會造成IP地址 配置DHCP地址池中不參與自動分配的IP地址dhcpserverforbidden-iplow-ip-addresshigh-ip-address]刪除DHCP地址池中不參與自動分配的IP地址dhcpserverforbidden-iplow-ip-addresshigh-ip-address]配置DHCP地址池的IP地址租用有對于不同的地址池，DHCP服務(wù)器可以指定不同的地址租用期限，但同一DHCP地址池中的地址都具有相同的期限。全局DHCP請在DHCP配置動態(tài)分配的IPexpired{dayday[hourhour[minuteminute]]|unlimited}恢復(fù)缺省的IPundo配置DHCP地址池的IP地址租用有接口DHCP請在以太網(wǎng)接口（含子接口）配置動態(tài)分配的IP地址租用有效期限dhcpserverexpired{dayday[hourhour[minuteminute]]|unlimited}恢復(fù)缺省的IPundodhcpserver配置DHCP地址池的IP地址租用有多個接口的DHCP配置動態(tài)分配的IPdhcpserverexpired{dayday[hourhour[minuteminute]]|unlimited}{interfaceinterface-typeinterface-number[tointerface-typeinterface-number|all}恢復(fù)缺省的IPundodhcpserverexpired{interfaceinterface-typeinterface-number[tointerface-typeinterface-number|all}配置DHCP客戶端在DHCP服務(wù)器上，可以為每個地址池分別指定客戶端使 如果配置全局DHCP地址池，請在DHCP地址池視圖下- - 如果配置接口DHCP地址池，請在以太網(wǎng)接口（含子接口dhcp undodhcp 配置DHCP客戶端如果配置多個接口的DHCP地址池，請在系統(tǒng)視圖下進(jìn)行dhcpserver -name{interfaceinterface-typeinterface-number[tointerface-typeinterface-number|all}undodhcpserver -name{interfaceinterface-typeinterface-number[tointerface-typeinterface-number|all}配置DHCP客戶端的DNS服務(wù)器IP地在目前的實現(xiàn)中，每個DHCP地址池最多可以配置8DNS如果配置全局DHCP地址池，請在DHCP地址池視圖下dns-listip-address[ip-address]undodns-list{ip-address|all}如果配置接口DHCP地址池，請在以太網(wǎng)接口（含子接口dhcpserverdns-listip-address[ip-addressundodhcpserverdns-list{ip-address|all配置DHCP客戶端的DNS服務(wù)器IP地如果配置多個接口的DHCP地址池，請在系統(tǒng)視dhcpserverdns-listip-address[ip-address{interfaceinterface-typeinterface-number[interface-typeinterface-number|allundodhcpserverdns-list{ip-address|all{interfaceinterface-typeinterface-number[interface-typeinterface-number|all配置DHCPDHCP客戶端 數(shù)據(jù)必須通過出口網(wǎng)關(guān)進(jìn)行收發(fā)。請在DHCP地配置DHCPgateway-listip-address[ip-address刪除DHCPundogateway-list{ip-address|all}作為DHCP客戶端的網(wǎng)關(guān)，并把給客戶DHCP客戶端配DHCP客戶端的配置很簡單，僅包括下面一條配裝PPP/HDLC/FR的同/異步串口或E1接口上均可通過DHCP方式獲取地址。請在以太網(wǎng)接口（包括子接口）、同/異步串口、E1接口視圖下啟動DHCP客戶端，以獲取本地IPipaddressdhcp-關(guān)閉DHCP paddressdhcp-DHCP顯示和調(diào)可在任意視圖下執(zhí)行display命令顯示配置后DHCP的運查看DHCPdisplaydhcpserverfree-查看DHCPdisplaydhcpserverip-in-use{all|ipip-address|pool[pool-name]|interface[interface-typeinterface-number]}查看DHCPdisplaydhcpservertree{pool[pool-name|interface[interface-typeinterface-number]|allDHCP配置過程總配置實例 配置實例[Router]dhcp[Router]dhcpserverforbidden//子網(wǎng)1網(wǎng)關(guān)[Router]dhcpserverforbiddenDNS服務(wù)器[Router]dhcpserverforbidden//子網(wǎng)2網(wǎng)關(guān)[Router]Int[Router-Ethernet0/0]ipadd24[Router-Ethernet0/0]dhcpselectglobal [Router]Inte0/1[Router-Ethernet0/1]ipadd24[Router-Ethernet0/1]dhcpselectglobal 配置實例[Router]dhcpserverip-poolpool0mask 配置實例[Router]dhcpserverip-poolpool1mask 配置實例配置實例[Router]dhcp[Router]dhcpserverforbidden//子網(wǎng)1網(wǎng)關(guān)[Router]dhcpserverforbiddenDNS服務(wù)器[Router]dhcpserverforbidden//子網(wǎng)2網(wǎng)關(guān)[Router]Int[Router-Ethernet0/0]ipadd24[Router-Ethernet0/0]dhcpselectinterface[Router]Inte0/1[Router-Ethernet0/1]ipadd24[Router-Ethernet0/1]dhcpselectinterface//[Router]dhcpselectinterfaceinterfacee0/0to配置實例[Router]dhcpserverexpiredday10hour10interfacee0/0toe0/1[Router]dhcpserver interfacee0/0toe0/1[Router]dhcpserverdns-list配置實例配置實例配置DHCPServer配置總部DHCPServer的Vlan-interface10接口的IP<H3C>system-[H3C]interfaceVlan-interface[H3C-Vlan-interface10ipaddress24#配置該接口工作在接口地址池模式下，分配/24網(wǎng)段的IP地址[H3C-Vlan-interface10]dhcpselect配置該地址池的有效期，并配置指定的DNS、WINS服務(wù)[H3C-Vlan-interface10]dhcpserverexpiredday[H3C-Vlan-interface10]dhcpserverdns-list[H3C-Vlan-interface10dhcpservernbst-list#使用IP地址與MAC地址綁定的方式為DNS/WINS/Mail[H3C-Vlan-interface10]dhcpserverstatic-bin