beautypg.com

Allied Telesis Rapier i Series User Manual

Page 18

background image

Page 18 | AlliedWare™ OS How To Note: DHCP Snooping on Rapier-style switches

Configuration examples

enable ip

add ip int=vlan48 ip=10.11.67.254 mask=255.255.255.0

add ip int=vlan50 ip=10.50.1.254 mask=255.255.255.0

add ip rou=0.0.0.0 mask=0.0.0.0 int=vlan50 next=10.50.1.1

enable bootp relay

add bootp relay=10.50.1.100

Here the DHCP server is set to 10.50.1.100.

enable dhcpsnooping

enable dhcpsnooping option82

Note:

It is also possible to enable DHCP snooping ARP security. If enabled this will ensure
that ARP packets received on un-trusted ports are only permitted if they originate
from an IP address that has been allocated and snooped by DHCP (enable
dhcpsnooping arpsecurity
).

set dhcpsnooping port=25 trusted=yes

This port is open for generating and receiving Option 82 information. By default, the other
ports are non-trusted.

set dhcpsnooping port=1-24 maxlease=1

set dhcpsnooping port=1 subscriberid="Ground Floor Room 1"

X Configure the switch’s IP

:

X

For layer 3 support, enable the BOOTP Relay:

X

Enable DHCP snooping and Option 82 support:

X

Define the DHCP snooping trusted port:

X

Define the maximum number of DHCP leasees permitted on each port:

X

Define the string that will be used in the subscriber-ID suboption portion of
the Option 82 inserted into DHCP packets: