Enterasys Enterasys SecureStack B2 B2G124-24 Specifikace Strana 511

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 600
  • Tabulka s obsahem
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 510
Dynamic ARP Inspection Overview
SecureStack B2 Configuration Guide 18-19
Example Configuration
ThefollowingexampleconfiguresDHCPsnoopinganddynamicARPinspectioninarouting
environmentusingRIP.Theexampleconfigurestwointerfacesontheswitch,configuringRIPon
bothinterfaces,assigningeachtoadifferentVLAN,andthenenablingDHCPsnoopingand
dynamicARPinspection onthem:
•Interfacege.1.1,whichisconnected
toaremoteDHCPserver,onVLAN192
•Interfacege.1.2,whichisconnectedtoDHCPclients,onVLAN10
Inaddition,thedefaultVLAN,VLAN1,isalsoenabledforDHCPsnoopinganddynamicARP
inspection.
SincetheDHCPserverisremote,theswitchhasbeenconfiguredasaDHCPrelayagent
(withthe
iphelperaddresscommand),toforwardclientrequeststotheDHCPserver.Therefore,MAC
addressverificationisdisabled(withthesetdhcpsnoopingverifymacaddressdisable
command)inordertoallowDHCPRELEASEpacketstobeprocessedbytheDHCPsnooping
functionalityandclientbindingsremovedfromthebindings
database
Router Configuration
router
enable
configure
interface vlan 10
no shutdown
ip address 10.2.0.1 255.255.0.0
ip helper-address 192.168.0.200
ip rip send version 2
ip rip receive version 2
ip rip enable
exit
interface vlan 192
no shutdown
ip address 192.168.0.1 255.255.255.0
ip rip send version 2
ip rip receive version 2
ip rip enable
exit
router rip
exit
VLAN Configuration
set vlan create 10
set vlan create 192
clear vlan egress 1 ge.1.1-2
T
Note: This example applies only to platforms that support routing.
Zobrazit stránku 510
1 2 ... 506 507 508 509 510 511 512 513 514 515 516 ... 599 600

Komentáře k této Příručce

Žádné komentáře