根据交换机端口分配固定地址的解决方案: http://www.Sina.com/:打开DHCP snooping的option82策略分配。 将交换机的每个端口标记为option82群集,DHCP服务器根据option82群集标记分配固定地址。
这里,以H3C交换机为例,为VLAN 10中的终端分配地址。
希望为交换机端口1-24依次分配固定地址172.16.10.1-172.16.10.24/24的地址。
技术原理
[ h3c ] DHCP启用
[H3C]DHCP服务器IP-poolVLAN10
[ h3c-DHCP-pool-VLAN 10 ]网络172.16.10.0掩码255.255.255.0
[ h3c-DHCP-pool-VLAN 10 ]网关列表172.16.10.254
[ h3c-DHCP-pool-VLAN 10 ] DNS-list 114.114.114.114
[ h3c-DHCP-pool-VLAN 10 ] expired day0hour 2
[ h3c-DHCP-pool-VLAN 10 ]类端口1范围172.16.10.1172.16.10.1 #类端口1标记地址172.16.10.1
[ h3c-DHCP-pool-VLAN 10 ] class port2range 172.16.10.2172.16.10.2
[ h3c-DHCP-pool-VLAN 10 ] class port3range 172.16.10.3172.16.10.3
[ h3c-DHCP-pool-VLAN 10 ] class port4range 172.16.10.4172.16.10.4
[H3C-dhcp-pool-vlan10]quit
[ h3c ]接口以太网1/0/1 to以太网1/0/4
[ h3c-if-range ]端口链接-类型访问
[ h3c-if-range ]端口访问VLAN 10
[H3C-if-range]quit
[ h3c ]接口VLAN -接口10
[ h3c-VLAN -接口10 ] IP地址172.16.10.25424
启动[ h3c-VLAN -接口10 ] dhcpselectserver # DHCP服务
1、创建DHCP服务器并做option82类标记:
[ h3c ] DHCP类端口1
[ h3c-DHCP-class-port1] if-match rule 1选项82 hex 706 f 727431 offset2length 5
[H3C-dhcp-class-port1]quit
#hex表示十六进制数; “706f727431”是十六进制值,转换后的字符为“端口1”。 与以下相同。 “offset 2 length 5”表示option允许偏移2,十六进制字符串的长度为5。
在线转换网站: https://www.so JSON.com/hexadecimal.html
[ h3c ] DHCP类端口2
[ h3c-DHCP-class-port2] if-match rule 1选项82 hex 706 f 727432 offset2length 5
[H3C-dhcp-class-port2]quit
[ h3c ] DHCP类端口3
[ h3c-DHCP-class-port3] if-match rule 1选项82 hex 706 f 727433 offset2length 5
[H3C-dhcp-class-port3]quit
[ h3c ] DHCP类端口4
[ h3c-DHCP-class-port4] if-match rule 1选项82 hex 706 f 727434 offset2length 5
[H3C-dhcp-class-port4]quit
2、配置option82的参数信息:
[ h3c ]全局打开dhcpsnoopingenable # DHCP snooping功能
[ h3c ]启用接口以太网1/0/1 #端口dhcp snooping以支持选项82功能,并将circuit-id设置为端口1
[ h3c -以太网1/0/1 ]打开支持dhcpsnoopinginformationenable # option 82字段的功能
[ h3c -以太网1/0/1 ] dhcpsnoopinginformationcircuit-idstringport1# string后跟自定义字符
[ h3c -以太网1/0/1 ] quit
[ h3c ]接口以太网1/0/2
[ h3c -以太网1/0/2 ] dhcpsnoopinginformationenable
[ h3c -以太网1/0/2 ] dhcpsnoopinginformationcircuit-idstringport 2
[ h3c -以太网1/0/2 ] quit
[ h3c ]接口以太网1/0/3
[ h3c -以太网1/0/3 ] dhcpsnoopinginformationenable
[ h3c -以太网1/0/3 ] dhcpsnoopinginformationcircuit-idstringport 3
[ h3c -以太网1/0/3 ] quit
[ h3c ]接口以太网1/0/4
[ h3c -以太网1/0/4 ] dhcpsnoopinginformationenable
[ h3c -以太网1/0/4 ] dhcpsnoopinginformationcircuit-idstringport 4
[ h3c -以太网1/0/4 ] quit
------------- -请参阅
终端调试
终端监视器
debuggingdhcpsnoopinginformation
* oct 191633603733603833602012019 H3 cdhcpsp4/7/info : received packet : option 82 offset is 0,option82handlingstrategyis
* oct 19163360373603833603833602012019 H3 cdhcpsp4/7/info : fill circuit-idinpaddingformatstring 3360 length is7。
* oct 19163360373603833603833602012019 H3 cdhcpsp4/7/info :文件远程- idinpaddingformatnormal 3360 length is10。
* oct 191633603733603833602012019 H3 cdhcpsp4/7/info : recalculatedipandudpchecksum。
* oct 191633603733603833607902019 H3 cdhcpsp4/7/info : stripping option 82 succeeded : offset is 331,stripped length is 19。
* oct 191633603733603833607902019 H3 cdhcpsp4/7/info : padded packet : paddedlengthis 14。
* oct 1916336037360383360383607902019 H3 cdhcpsp4/7/info : recalculatedipandudpchecksum。
* oct 191633603733603833607922019 H3 cdhcpsp4/7/info : received packet : option 82 offset is 0,option82handlingstrategyis
* oct 191633603733603833607922019 H3 cdhcpsp4/7/info : fill circuit-idinpaddingformatstring 3360 length is7。
* oct 191633603733603833607922019 H3 cdhcpsp4/7/info :文件远程- idinpaddingformatnormal 3360 length is10。
* oct 191633603733603833607922019 H3 cdhcpsp4/7/info : recalculatedipandudpchecksum。
* oct 191633603733603833607952019 H3 cdhcpsp4/7/info : stripping option 82 succeeded : offset is 331,stripped length is 19。
* oct 191633603733603833607952019 H3 cdhcpsp4/7/info : padded packet : paddedlengthis 14。
* oct 191633603733603833607952019 H3 cdhcpsp4/7/info : recalculatedipandudpchecksum。
显示ARP all
type : s-staticd-dynamico-openflow r-rulem-multiport I-invalid
ipaddressmacaddressvlan/vsiinterfaceagingtype
172.16.10.4 b00c-d16b- c 77110 eth1/0/41191 d
------------- -请参阅