210Dynamic IPv4 source guard using DHCP relay configurationexampleNetwork requirementsAs shown in Figure 66, the host and the DHCP server are connected to the switch through interfacesVLAN-interface 100 and VLAN-interface 200 respectively. DHCP relay is enabled on the switch. The hostobtains an IP address from the DHCP server through the DHCP relay agent.Enable dynamic IPv4 source guard on VLAN-interface 100 to filter received packets based on the DHCPrelay entry generated on the switch.Figure 66 Network diagramConfiguration procedure1. Configure dynamic IPv4 source guard:# Configure IP addresses for the interfaces. (Details not shown.)# Enable IPv4 source guard on VLAN-interface 100 to filter packets based on both the source IPaddress and the MAC address. system-view[Switch] interface vlan-interface 100[Switch-Vlan-interface100] ip verify source ip-address mac-address[Switch-Vlan-interface100] quit2. Configure the DHCP relay agent:# Enable the DHCP service.[Switch] dhcp enable# Enable recording DHCP relay client entries.[Switch] dhcp relay client-information record# Configure VLAN-interface 100 to work in DHCP relay mode.[Switch] interface vlan-interface 100[Switch-Vlan-interface100] dhcp select relay# Specify the IP address of the DHCP server.[Switch-Vlan-interface100] dhcp relay server-address 10.1.1.1[Switch-Vlan-interface100] quitVerifying the configuration# Display dynamic IPv4 source guard binding entries.[Switch] display ip source binding dhcp-relayTotal entries found: 1IP Address MAC Address Interface VLAN Type192.168.0.1 0001-0203-0406 Vlan100 100 DHCP relay
