Operation Manual – DHCPH3C S3100 Series Ethernet Switches Chapter 2 DHCP Snooping Configuration2-19II. Network diagramSwitchDHCP SnoopingEth1/0/2Client CEth1/0/1DHCP ServerClient BHost AIP:1.1.1.1MAC:0001-0001-0001Eth1/0/3Eth1/0/4Figure 2-8 Network diagram for IP filtering configurationIII. Configuration procedure# Enable DHCP snooping on the switch. system-view[Switch] dhcp-snooping# Specify Ethernet1/0/1 as the trusted port.[Switch] interface Ethernet1/0/1[Switch-Ethernet1/0/1] dhcp-snooping trust[Switch-Ethernet1/0/1] quit# Enable IP filtering on Ethernet1/0/2, Ethernet1/0/3, and Ethernet1/0/4 to filter packetsbased on the source IP addresses/MAC addresses.[Switch] interface Ethernet1/0/2[Switch-Ethernet1/0/2] ip check source ip-address mac-address[Switch-Ethernet1/0/2] quit[Switch] interface Ethernet1/0/3[Switch-Ethernet1/0/3] ip check source ip-address mac-address[Switch-Ethernet1/0/3] quit[Switch] interface Ethernet1/0/4[Switch-Ethernet1/0/4] ip check source ip-address mac-address[Switch-Ethernet1/0/4] quit# Create static binding entries on Ethernet1/0/2 of the switch.[Switch] interface Ethernet1/0/2
