04-Layer 3 Command Reference

HomeSupportReference GuidesCommand ReferencesH3C WX Series Access Controllers Command References(R3308 R2308)-6W10704-Layer 3 Command Reference
03-DHCP Commands
Title Size Download
03-DHCP Commands 383.48 KB

Contents

DHCP server configuration commands 1

bims-server 1

bootfile-name· 1

dhcp enable· 2

dhcp server apply ip-pool 3

dhcp select server global-pool 3

dhcp server detect 4

dhcp server forbidden-ip· 5

dhcp server ip-pool 6

dhcp server ping packets 6

dhcp server ping timeout 7

dhcp server relay information enable· 8

dhcp server threshold· 8

display dhcp server conflict 9

display dhcp server expired· 10

display dhcp server free-ip· 11

display dhcp server forbidden-ip· 12

display dhcp server ip-in-use· 12

display dhcp server statistics 14

display dhcp server tree· 16

dns-list 17

domain-name· 18

expired· 18

forbidden-ip· 19

gateway-list 20

nbns-list 21

netbios-type· 21

network· 22

network ip range· 23

network mask· 24

option· 24

reset dhcp server conflict 25

reset dhcp server ip-in-use· 26

reset dhcp server statistics 26

static-bind client-identifier 27

static-bind ip-address 27

static-bind mac-address 28

tftp-server domain-name· 29

tftp-server ip-address 30

vendor-class-identifier 30

voice-config· 31

DHCP relay agent configuration commands 33

dhcp relay address-check enable· 33

dhcp relay check mac-address 34

dhcp relay client-detect enable· 34

dhcp relay information circuit-id format-type· 35

dhcp relay information circuit-id string· 36

dhcp relay information enable· 36

dhcp relay information format 37

dhcp relay information remote-id format-type· 38

dhcp relay information remote-id string· 38

dhcp relay information strategy· 39

dhcp relay release ip· 40

dhcp relay security static· 40

dhcp relay security refresh enable· 41

dhcp relay security tracker 42

dhcp relay server-detect 43

dhcp relay server-group· 43

dhcp relay server-select 44

dhcp select relay· 45

display dhcp relay· 45

display dhcp relay information· 46

display dhcp relay security· 48

display dhcp relay security statistics 49

display dhcp relay security tracker 49

display dhcp relay server-group· 50

display dhcp relay statistics 51

reset dhcp relay statistics 53

DHCP client configuration commands 54

display dhcp client 54

ip address dhcp-alloc· 56

DHCP snooping configuration commands 58

dhcp-snooping· 58

dhcp-snooping binding database filename· 58

dhcp-snooping binding database update interval 59

dhcp-snooping binding database update now·· 60

dhcp-snooping check mac-address 60

dhcp-snooping check request-message· 61

dhcp-snooping information circuit-id format-type· 62

dhcp-snooping information circuit-id string· 62

dhcp-snooping information enable· 63

dhcp-snooping information format 64

dhcp-snooping information remote-id format-type· 65

dhcp-snooping information remote-id string· 65

dhcp-snooping information strategy· 66

dhcp-snooping trust 67

display dhcp-snooping· 68

display dhcp-snooping binding database· 69

display dhcp-snooping information· 70

display dhcp-snooping packet statistics 71

display dhcp-snooping trust 72

reset dhcp-snooping· 72

reset dhcp-snooping packet statistics 73

BOOTP client configuration commands 74

display bootp client 74

ip address bootp-alloc· 75

 


 

 

NOTE:

DHCP snooping is not supported on the DHCP server.

 

bims-server

Syntax

bims-server ip ip-address [ port port-number ] sharekey key

undo bims-server

View

DHCP address pool view

Default level

2: System level

Parameters

ip ip-address: Specifies an IP address for the BIMS server.

port port-number: Specifies a port number for the BIMS server in the range of 1 to 65534.

sharekey key: Specifies a shared key for the BIMS server, a string of 1 to 16 characters.

Description

Use bims-server to specify the IP address, port number, and shared key of the BIMS server in the DHCP address pool for the client.

Use undo bims-server to remove the specified BIMS server information.

By default, no BIMS server information is specified.

If you execute the bims-server command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the IP address 1.1.1.1, port number 80, shared key aabbcc of the BIMS server in DHCP address pool 0 for the client.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] bims-server ip 1.1.1.1 port 80 sharekey aabbcc

bootfile-name

Syntax

bootfile-name bootfile-name

undo bootfile-name

View

DHCP address pool view

Default level

2: System level

Parameters

bootfile-name: Boot file name, a string of 1 to 63 characters.

Description

Use bootfile-name to specify a bootfile name in the DHCP address pool for the client.

Use undo bootfile-name to remove the specified bootfile name.

By default, no bootfile name is specified.

If you execute the bootfile-name command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the bootfile name aaa.cfg in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] bootfile-name aaa.cfg

dhcp enable

Syntax

dhcp enable

undo dhcp enable

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp enable to enable DHCP.

Use undo dhcp enable to disable DHCP.

By default, DHCP is disabled.

 

 

NOTE:

You need to enable DHCP before performing DHCP server and relay agent configurations.

 

Examples

# Enable DHCP.

<Sysname> system-view

[Sysname] dhcp enable

dhcp server apply ip-pool

Syntax

dhcp server apply ip-pool pool-name

undo dhcp server apply ip-pool [ pool-name ]

View

Interface view

Default level

2: System level

Parameters

pool-name: DHCP address pool name, a case-insensitive string in the range of 1 to 35 characters.

Description

Use dhcp server apply ip-pool to apply an extended address pool on an interface.

Use undo dhcp server apply ip-pool to remove the configuration.

By default, no extended address pool is applied on an interface, and the server assigns an IP address from a common address pool to a client when the client's request arrives at the interface.

·     If you execute the dhcp server apply ip-pool command on an interface, when a client's request arrives at the interface, the server attempts to assign the client the statically bound IP address first and then an IP address from this extended address pool.

·     Only an extended address pool can be applied on an interface. The address pool to be referenced must already exist.

Related commands: dhcp server ip-pool.

Examples

# Apply extended DHCP address pool 0 on VLAN-interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp server apply ip-pool 0

dhcp select server global-pool

Syntax

dhcp select server global-pool [ subaddress ]

undo dhcp select server global-pool [ subaddress ]

View

Interface view

Default level

2: System level

Parameters

subaddress: Supports secondary address allocation. When the DHCP server and client are on the same network segment, the server preferably assigns an IP address from an address pool that resides on the same subnet as the primary IP address of the server interface (connecting to the client). If the address pool contains no assignable IP address, the server assigns an IP address from an address pool that resides on the same subnet as the secondary IP addresses of the server interface. If the interface has multiple secondary IP addresses, each address pool is tried in turn for address allocation. Without the keyword subaddress specified, the DHCP server can only assign an IP address from the address pool that resides on the same subnet as the primary IP address of the server interface.

Description

Use dhcp select server global-pool to enable the DHCP server on specified interfaces. After the interface receives a DHCP request from a client, the DHCP server will allocate an IP address from the address pool.

Use undo dhcp select server global-pool to remove the configuration. Upon receiving a DHCP request from a client, the interface will neither assign an IP address to the client, nor serve as a DHCP relay agent to forward the request.

Use undo dhcp select server global-pool subaddress to disable the support for secondary address allocation.

By default, the DHCP server is enabled on an interface.

Examples

# Enable the DHCP server on VLAN-interface 1 to assign IP addresses from the address pool that resides on the same subnet as the primary IP address of the server interface (connecting to the client) for the client.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp select server global-pool

dhcp server detect

Syntax

dhcp server detect

undo dhcp server detect

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp server detect to enable unauthorized DHCP server detection.

Use undo dhcp server detect to disable the function.

By default, the function is disabled.

With this function enabled, upon receiving a DHCP request, the DHCP server will resolve from the request the IP addresses of DHCP servers which ever offered IP addresses to the DHCP client and the receiving interface. Each server detected is recorded only once. The administrator can get this information from logs to check out unauthorized DHCP servers.

Examples

# Enable unauthorized DHCP server detection.

<Sysname> system-view

[Sysname] dhcp server detect

dhcp server forbidden-ip

Syntax

dhcp server forbidden-ip low-ip-address [ high-ip-address ]

undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]

View

System view

Default level

2: System level

Parameters

low-ip-address: Start IP address of the IP address range to be excluded from dynamic allocation.

high-ip-address: End IP address of the IP address range to be excluded from dynamic allocation. The end IP address must have a higher sequence than the start one.

Description

Use dhcp server forbidden-ip to exclude IP addresses from dynamic allocation.

Use undo dhcp server forbidden-ip to remove the configuration.

By default, all IP addresses in a DHCP address pool are assignable except IP addresses of the DHCP server interfaces.

·     When you use the dhcp server forbidden-ip command to exclude an IP address that is bound to a user from dynamic assignment, the address can be still assigned to the user.

·     When you use the undo dhcp server forbidden-ip command to remove the configuration, the specified address/address range must be consistent with the one specified with the dhcp server forbidden-ip command. If you have configured to exclude an address range from dynamic assignment, you need to specify the same address range in the undo dhcp server forbidden-ip command instead of specifying one IP address.

·     Using the dhcp server forbidden-ip command repeatedly can exclude multiple IP address ranges from allocation.

Related commands: display dhcp server forbidden-ip, dhcp server ip-pool, network, and static-bind ip-address.

Examples

# Exclude the IP address range 10.110.1.1 to 10.110.1.63 from dynamic allocation.

<Sysname> system-view

[Sysname] dhcp server forbidden-ip 10.110.1.1 10.110.1.63

dhcp server ip-pool

Syntax

dhcp server ip-pool pool-name [ extended ]

undo dhcp server ip-pool pool-name

View

System view

Default level

2: System level

Parameters

pool-name: Global address pool name, which is a unique pool identifier, a string of 1 to 35 characters.

extended: Specifies the address pool as an extended address pool. If this keyword is not specified, the address pool is a common address pool.

Description

Use dhcp server ip-pool to create a DHCP address pool and enter its view. If the pool was created, you will directly enter its view.

Use undo dhcp server ip-pool to remove the specified DHCP address pool.

By default, no DHCP address pool is created.

Related commands: dhcp enable and display dhcp server tree.

Examples

# Create the common address pool identified by 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0]

dhcp server ping packets

Syntax

dhcp server ping packets number

undo dhcp server ping packets

View

System view

Default level

2: System level

Parameters

number: Number of ping packets, in the range of 0 to 10. 0 means no ping operation.

Description

Use dhcp server ping packets to specify the maximum number of ping packets on the DHCP server.

Use undo dhcp server ping packets to restore the default.

The number defaults to 1.

To avoid IP address conflicts, the DHCP server checks whether an IP address is in use before assigning it to a DHCP client.

The DHCP server pings the IP address to be assigned by using ICMP. If the server gets a response within the specified period, the server selects and pings another IP address. If not, the server pings the IP address again until the specified number of ping attempts is reached. If still no response is received, the server assigns the IP address to the requesting client.

Examples

# Specify the maximum number of ping packets as 10.

<Sysname> system-view

[Sysname] dhcp server ping packets 10

dhcp server ping timeout

Syntax

dhcp server ping timeout milliseconds

undo dhcp server ping timeout

View

System view

Default level

2: System level

Parameters

milliseconds: Response timeout value for ping packets in milliseconds, in the range of 0 to 10,000. 0 means no ping operation.

Description

Use dhcp server ping timeout to configure the ping response timeout time on the DHCP server.

Use undo dhcp server ping timeout to restore the default.

The time defaults to 500 ms.

To avoid IP address conflicts, the DHCP server checks whether an IP address is in use before assigning it to a DHCP client.

The DHCP server pings the IP address to be assigned by using ICMP. If the server gets a response within the specified interval, the server selects and pings another IP address. If not, the server pings the IP address again until the specified number of ping attempts is reached. If still no response is received, the server assigns the IP address to the requesting client.

Examples

# Specify the response timeout time as 1000 ms.

<Sysname> system-view

[Sysname] dhcp server ping timeout 1000

dhcp server relay information enable

Syntax

dhcp server relay information enable

undo dhcp server relay information enable

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp server relay information enable to enable the DHCP server to handle Option 82.

Use undo dhcp server relay information enable to configure the DHCP server to ignore Option 82.

By default, the DHCP server handles Option 82.

Examples

# Configure the DHCP server to ignore Option 82.

<Sysname> system-view

[Sysname] undo dhcp server relay information enable

dhcp server threshold

Syntax

dhcp server threshold { allocated-ip threshold-value | average-ip-use threshold-value | max-ip-use threshold-value }

undo dhcp server threshold { allocated-ip | average-ip-use | max-ip-use }

View

System view

Default level

2: System level

Parameters

allocated-ip threshold-value: Enables the DHCP server to send trap messages to the network management server when the ratio of successfully allocated IP addresses to received DHCP requests within five minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100.

average-ip-use threshold-value: Enables the DHCP server to send trap messages to the network management server when the average IP address utilization of an address pool within five minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100.

max-ip-use threshold-value: Enables the DHCP server to send trap messages to the network management server when the maximum IP address utilization of an address pool within five minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100.

Description

Use dhcp server threshold to enable the DHCP server to send trap messages to the network management server when the specified threshold is reached.

Use undo dhcp server threshold to restore the default.

By default, the DHCP server does not send trap messages to the network management server.

Examples

# Enable the DHCP server to send trap messages to the network management server when the ratio of successfully allocated IP addresses to received DHCP requests within five minutes exceeds 50%.

<Sysname> system-view

[Sysname] dhcp server threshold allocated-ip 50

# Enable the DHCP server to send trap messages to the network management server when the average IP address utilization of an address pool within five minutes exceeds 80%.

<Sysname> system-view

[Sysname] dhcp server threshold average-ip-use 80

# Enable the DHCP server to send trap messages to the network management server when the maximum IP address utilization of an address pool within five minutes exceeds 80%.

<Sysname> system-view

[Sysname] dhcp server threshold max-ip-use 80

display dhcp server conflict

Syntax

display dhcp server conflict { all | ip ip-address } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays information about all IP address conflicts.

ip-address: Displays conflict information for a specified IP address.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server conflict to display information about IP address conflicts.

Related commands: reset dhcp server conflict.

Examples

# Display information about all IP address conflicts.

<Sysname> display dhcp server conflict all

    Address             Discover time

    4.4.4.1             Apr 25 2007 16:57:20

    4.4.4.2             Apr 25 2007 17:00:10

 --- total 2 entry ---

Table 1 Command output

Field

Description

Address

Conflicted IP address.

Discover Time

Time when the conflict was discovered.

 

display dhcp server expired

Syntax

display dhcp server expired { all | ip ip-address | pool [ pool-name ] } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays the lease expiration information of all DHCP address pools.

ip ip-address: Displays the lease expiration information of a specified IP address.

pool [ pool-name ]: Displays the lease expiration information of a specified address pool. The pool name is a string of 1 to 35 characters. If the pool name is not specified, the lease expiration information of all address pools is displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server expired to display the lease expiration information of specified DHCP address pools or an IP address.

DHCP assigns these expired IP addresses to DHCP clients after all addresses have been assigned.

Examples

# Display information about lease expirations in all DHCP address pools.

<Sysname> display dhcp server expired all

 IP address       Client-identifier/    Lease expiration          Type

                    Hardware address

 4.4.4.6          3030-3066-2e65-3230-  Apr 25 2007 17:10:47     Release

                   302e-3130-3234-2d45-

                   7468-6572-6e65-7430-

                   2f31

 

 --- total 1 entry ---

Table 2 Command output

Field

Description

IP address

Expired IP addresses.

Client-identifier/Hardware address

IDs or MACs of clients whose IP addresses were expired.

Lease expiration

The lease expiration time.

Type

Types of lease expirations. This field is set to Release.

 

display dhcp server free-ip

Syntax

display dhcp server free-ip [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server free-ip to display information about assignable IP addresses which have never been assigned.

Examples

# Display information about assignable IP addresses.

<Sysname> display dhcp server free-ip

IP Range from 10.0.0.1              to  10.0.0.254

display dhcp server forbidden-ip

Syntax

display dhcp server forbidden-ip [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server forbidden-ip to display IP addresses excluded from dynamic allocation in DHCP address pool.

Examples

# Display IP addresses excluded from dynamic allocation in the DHCP address pool.

<Sysname> display dhcp server forbidden-ip

Global:

IP Range from 1.1.0.2              to  1.1.0.3

IP Range from 1.1.1.2              to  1.1.1.3

Pool name: 2

1.1.1.5          1.1.1.6

Table 3 Command output

Field

Description

Global

Globally excluded IP addresses specified with the dhcp server forbidden-ip command in system view. No address pool can assign these IP addresses.

Pool name

Excluded IP addresses specified with the forbidden-ip command in DHCP address pool view. They cannot be assigned from the current extended address pool only.

 

display dhcp server ip-in-use

Syntax

display dhcp server ip-in-use { all | ip ip-address | pool [ pool-name ] } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays the binding information of all DHCP address pools.

ip ip-address: Displays the binding information of a specified IP address.

pool [ pool-name ]: Displays the binding information of a specified address pool. The pool name is a string of 1 to 35 characters. If no pool name is specified, the binding information of all address pools is displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server ip-in-use to display the binding information of DHCP address pools or an IP address.

Related commands: reset dhcp server ip-in-use.

Examples

# Display the binding information of all DHCP address pools.

<Sysname> display dhcp server ip-in-use all

Pool utilization: 0.39%

 IP address    Client-identifier/    Lease expiration        Type

                  Hardware address

 10.1.1.1       4444-4444-4444        NOT Used                  Manual

 10.1.1.2      3030-3030-2e30-3030-   May  1 2009 14:02:49      Auto:COMMITTED

               662e-3030-3033-2d45-

               7468-6572-6e65-7430-

               2f31

 

 --- total 2 entry ---

Table 4 Command output

Field

Description

Pool utilization

Utilization rate of IP addresses in a DHCP address pool, which is the ratio of assigned IP addresses to assignable IP addresses in the DHCP address pool.

·     When the binding information of all DHCP address pools is displayed, this field displays the total utilization rate of IP addresses in all DHCP address pools.

·     When the binding information of a specific DHCP address pool is displayed, this field displays the utilization rate of IP addresses in the DHCP address pool.

·     When the binding information of a specific IP address is displayed, this field is not displayed.

IP address

Bound IP address.

Client-identifier/Hardware address

Client's ID or MAC of the binding.

Lease expiration

Lease expiration time:

·     Specific time (May  1 2009 14:02:49 in this example)Time when the lease expires.

·     NOT UsedThe IP address of the static binding has not been assigned to the specific client.

·     UnlimitedInfinite lease expiration time.

Type

Binding types:

·     ManualStatic binding.

·     AutoOFFERED: The binding sent in the DHCP-OFFER message from the server to the client.

·     AutoCOMMITTED: The binding sent in the DHCP-ACK message from the server to the client.

 

 

NOTE:

For static bound IP addresses that have been assigned to DHCP clients, their leases are always displayed unlimited. You can use the display this command in DHCP address pool view to display the lease durations of the static bound IP addresses.

 

display dhcp server statistics

Syntax

display dhcp server statistics [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server statistics to display the statistics of the DHCP server.

Related commands: reset dhcp server statistics.

Examples

# Display the statistics on the DHCP server.

<Sysname> display dhcp server statistics

    Global Pool:

      Pool Number:                     1

      Binding:

        Auto:                          1

        Manual:                        0

        Expire:                        0

    BOOTP Request:                     10

      DHCPDISCOVER:                    5

      DHCPREQUEST:                     3

      DHCPDECLINE:                     0

      DHCPRELEASE:                     2

      DHCPINFORM:                      0

      BOOTPREQUEST:                    0

    BOOTP Reply:                       6

      DHCPOFFER:                       3

      DHCPACK:                         3

      DHCPNAK:                         0

      BOOTPREPLY:                      0

    Bad Messages:                      0

Table 5 Command output

Field

Description

Global Pool

Statistics of a DHCP address pool

Pool Number

The number of address pools

Auto

The number of dynamic bindings

Manual

The number of static bindings

Expire

The number of expired bindings

BOOTP Request

The number of DHCP requests sent from DHCP clients to the DHCP server, including:

·     DHCPDISCOVER

·     DHCPREQUEST

·     DHCPDECLINE

·     DHCPRELEASE

·     DHCPINFORM

·     BOOTPREQUEST

BOOTP Reply

The number of DHCP replies sent from the DHCP server to DHCP clients, including:

·     DHCPOFFER

·     DHCPACK

·     DHCPNAK

·     BOOTPREPLY

Bad Messages

 The number of erroneous messages

 

display dhcp server tree

Syntax

display dhcp server tree { all | pool [ pool-name ] } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays information of all DHCP address pools.

pool [ pool-name ]: Displays information of a specified address pool. The pool name argument is a string of 1 to 35 characters. If no pool name is specified, information of all address pools will be displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp server tree to display information of DHCP address pools.

Examples

# Display information of all DHCP address pools.

<Sysname> display dhcp server tree all

Global pool:

 

Pool name: 0

 network 20.1.1.0 mask 255.255.255.0

 Sibling node:1

 option 2 ip-address 1.1.1.1

 expired 1 0 0 0

 

Pool name: 1

 static-bind ip-address 10.10.1.2 mask 255.0.0.0

 static-bind mac-address 00e0-00fc-0001

 PrevSibling node:0

 expired unlimited

 

Extended pool:

 

Pool name: 2

 network ip range 1.1.1.0 1.1.1.255

 network mask 255.255.255.0

 expired 0 0 2 0

Table 6 Command output

Field

Description

Global pool

Information of a common address pool.

Pool name

Address pool name.

network

Subnet for address allocation.

static-bind ip-address 10.10.1.2 mask 255.0.0.0

static-bind mac-address 00e0-00fc-0001

The IP address and MAC address of the static binding.

Sibling node

The sibling node of the current node, nodes of this kind in the output information include:

·     Child node: The child node (subnet segment) address pool of the current node.

·     Parent node: The parent node (nature network segment) address pool of the current node.

·     Sibling node: The latter sibling node of the current node (another subnet of the same nature network). The earlier the sibling node is configured, the higher order the sibling node has.

·     PrevSibling node: The previous sibling node of the current node.

option

Self-defined DHCP options.

expired

The lease duration, in the format of day, hour, minute, and second.

Extended pool

Information of an extended address pool.

network ip range

Range of assignable IP addresses in the extended address pool.

network mask

Mask of IP addresses assigned from the extended address pool.

 

dns-list

Syntax

dns-list ip-address&<1-8>

undo dns-list { ip-address | all }

View

DHCP address pool view

Default level

2: System level

Parameters

ip-address&<1-8>: DNS server IP address. &<1-8> means you can specify up to eight DNS server addresses separated by spaces.

all: Specifies all DNS server addresses to be removed.

Description

Use dns-list to specify DNS server addresses in a DHCP address pool.

Use undo dns-list to remove DNS server addresses from a DHCP address pool.

By default, no DNS server address is specified.

If you repeatedly use the dns-list command, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the DNS server address 10.1.1.254 for the DHCP client in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] dns-list 10.1.1.254

domain-name

Syntax

domain-name domain-name

undo domain-name

View

DHCP address pool view

Default level

2: System level

Parameters

domain-name: Domain name suffix for DHCP clients, a string of 1 to 50 characters.

Description

Use domain-name to specify a domain name suffix for the DHCP clients in the DHCP address pool.

Use undo domain-name to remove the specified domain name suffix.

No domain name suffix is specified by default.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify a domain name suffix of mydomain.com for the DHCP clients in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] domain-name mydomain.com

expired

Syntax

expired { day day [ hour hour [ minute minute [ second second ] ] ] | unlimited }

undo expired

View

DHCP address pool view

Default level

2: System level

Parameters

day day: Specifies the number of days, in the range of 0 to 365.

hour hour: Specifies the number of hours, in the range of 0 to 23.

minute minute: Specifies the number of minutes, in the range of 0 to 59.

second second: Specifies the number of seconds, in the range of 0 to 59.

unlimited: Specifies the unlimited lease duration, which is actually 136 years.

Description

Use expired to specify the lease duration in a DHCP address pool.

Use undo expired to restore the default lease duration in a DHCP address pool.

By default, the lease duration of a static address pool is unlimited, and the lease duration of a dynamic address pool is one day.

 

 

NOTE:

The lease duration cannot be less than 5 seconds.

 

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the lease duration as one day, two hours, three minutes, and four seconds in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] expired day 1 hour 2 minute 3 second 4

forbidden-ip

Syntax

forbidden-ip ip-address&<1-8>

undo forbidden-ip { ip-address&<1-8> | all }

View

DHCP extended address pool view

Default level

2: System level

Parameters

ip-address&<1-8>: IP addresses to be excluded from dynamic allocation. &<1-8> indicates that you can specify up to eight IP addresses, separated with spaces.

all: Excludes all IP addresses from dynamic allocation.

Description

Use forbidden-ip to exclude IP addresses from dynamic allocation in an extended address pool.

Use undo forbidden-ip to cancel specified or all excluded IP addresses.

By default, all IP addresses in an extended address pool are assignable except the IP addresses of the DHCP server interfaces.

·     Only the extended address pools support this command.

·     IP addresses specified with the forbidden-ip command in DHCP address pool view are excluded from dynamic address allocation in the current extended address pool only. They are assignable in other address pools.

·     Repeatedly using the forbidden-ip command can exclude multiple IP address ranges from dynamic allocation.

Related commands: dhcp server ip-pool and display dhcp server forbidden-ip.

Examples

# Exclude IP addresses 192.168.1.3 and 192.168.1.10 from dynamic allocation for extended address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0 extended

[Sysname-dhcp-pool-0] forbidden-ip 192.168.1.3 192.168.1.10

gateway-list

Syntax

gateway-list ip-address&<1-8>

undo gateway-list { ip-address | all }

View

DHCP address pool view

Default level

2: System level

Parameters

ip-address&<1-8>: Gateway IP address. &<1-8> means you can specify up to eight gateway addresses separated by spaces.

all: Specifies all gateway IP addresses to be removed.

Description

Use gateway-list to specify gateway addresses in a DHCP address pool.

Use undo gateway-list to remove specified gateway addresses specified for the DHCP client from a DHCP address pool.

By default, no gateway address is specified.

If you use the gateway-list command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the gateway address 10.110.1.99 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] gateway-list 10.110.1.99

nbns-list

Syntax

nbns-list ip-address&<1-8>

undo nbns-list { ip-address | all }

View

DHCP address pool view

Default level

2: System level

Parameters

ip-address&<1-8>: WINS server IP address. &<1-8> means you can specify up to eight WINS server addresses separated by spaces.

all: Specifies all WINS server addresses to be removed.

Description

Use nbns-list to specify WINS server addresses in a DHCP address pool.

Use undo nbns-list to remove the specified WINS server addresses.

By default, no WINS server address is specified.

If you use the nbns-list command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool, netbios-type, and display dhcp server tree.

Examples

# Specify WINS server address 10.12.1.99 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] nbns-list 10.12.1.99

netbios-type

Syntax

netbios-type { b-node | h-node | m-node | p-node }

undo netbios-type

View

DHCP address pool view

Default level

2: System level

Parameters

b-node: Broadcast node. A b-node client sends the destination name in a broadcast message. The destination returns the name-to-IP mapping to the client after receiving the message.

p-node: Peer-to-peer node. A p-node client sends the destination name in a unicast message to the WINS server, and the WINS server returns the mapping to the client.

m-node: Mixed node, a combination of a b-node first and p-node second. An m-node client broadcasts the destination name, if there is no response, and then unicasts the destination name to the WINS server to get the mapping.

h-node: Hybrid node, a combination of a p-node first and b-node second. An h-node is a b-node with the peer-to-peer communication mechanism. An h-node client unicasts the destination name to the WINS server, if there is no response, and then broadcasts it to get the mapping from the destination.

Description

Use netbios-type to specify the client NetBIOS node type in a DHCP address pool.

Use undo netbios-type to remove the specified client NetBIOS node type.

By default, no NetBIOS node type is specified.

Related commands: dhcp server ip-pool, nbns-list, and display dhcp server tree.

Examples

# Specify the NetBIOS node type as b-node in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] netbios-type b-node

network

Syntax

network network-address [ mask-length | mask mask ]

undo network

View

DHCP address pool view

Default level

2: System level

Parameters

network-address: Subnet for dynamic allocation. If no mask length and mask is specified, the natural mask will be used.

mask-length: Mask length, in the range of 1 to 30.

mask mask: Specifies the IP address network mask, in dotted decimal format.

Description

Use network to specify the subnet for dynamic allocation in a DHCP address pool.

Use undo network to remove the specified subnet.

No subnet is specified by default.

You can specify only one subnet for each common address pool. If you use the network command repeatedly, the latest configuration overwrites the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify 192.168.8.0/24 as the subnet for dynamic allocation in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] network 192.168.8.0 mask 255.255.255.0

network ip range

Syntax

network ip range min-address max-address

undo network ip range

View

DHCP address pool view

Default level

2: System level

Parameters

min-address: Lowest IP address for dynamic allocation.

max-address: Highest IP address for dynamic allocation.

Description

Use network ip range to specify the IP address range for dynamic allocation in an address pool.

Use undo network ip range to remove the specified address range.

No IP address range is specified by default.

 

 

NOTE:

·     In a common address pool, you can use the network ip range command to further specify an IP address range on a subnet for address allocation. The specified IP address range must belong to the subnet. Otherwise the common address pool cannot assign IP addresses.

·     You can specify only one IP address range for each address pool. If you use the network ip range command repeatedly, the latest configuration overwrites the previous one..

 

Related commands: dhcp server ip-pool, network, and display dhcp server tree.

Examples

# Specify addresses 10.1.1.1 through 10.1.1.150 on subnet 10.1.1.0/24 for dynamic address allocation in common address pool 1.

<Sysname> system-view

[Sysname] dhcp server ip-pool 1

[Sysname-dhcp-pool-1] network 10.1.1.0 24

[Sysname-dhcp-pool-1] network ip range 10.1.1.1 10.1.1.150

# Specify addresses 192.168.8.1 through 192.168.8.150 for dynamic address allocation in extended address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0 extended

[Sysname-dhcp-pool-0] network ip range 192.168.8.1 192.168.8.150

network mask

Syntax

network mask mask

undo network mask

View

DHCP extended address pool view

Default level

2: System level

Parameters

mask: Network mask, in dotted decimal notation.

Description

Use network mask to specify the IP address mask for dynamic allocation in an extended address pool.

Use undo network mask to remove the specified IP address mask.

No IP address mask is specified by default.

 

 

NOTE:

·     Only the extended address pools support this command.

·     If you specify an IP address range for an extended address pool without an IP address mask, the extended address pool is not valid, and therefore the system cannot assign IP addresses from the extended address pool.

 

Related commands: dhcp server ip-pool, display dhcp server tree, and network ip range.

Examples

# Specify 255.255.255.0 as the IP address mask for dynamic allocation in extended address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0 extended

[Sysname-dhcp-pool-0] network mask 255.255.255.0

option

Syntax

option code { ascii ascii-string | hex hex-string&<1-16> | ip-address ip-address&<1-8> }

undo option code

View

DHCP address pool view

Default level

2: System level

Parameters

code: Self-defined option number, in the range of 2 to 254, excluding 12, 50 to 55, 57 to 61, and 82.

ascii ascii-string: Specifies an ASCII string with 1 to 255 characters.

hex hex-string&<1-16>: Specifies hex digit strings. &<1-16> indicates that you can specify up to 16 hex digit strings, separated by spaces. Each string contains 2, 4, 6 or 8 hex digits.

ip-address ip-address&<1-8>: Specifies IP addresses. &<1-8> indicates that you can specify up to eight IP addresses, separated by spaces.

Description

Use option to configure a self-defined DHCP option in a DHCP address pool.

Use undo option to remove a self-defined DHCP option from a DHCP address pool.

The option command is not configured by default.

If you use the option command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Configure the hex digits 0x11 and 0x22 for the self-defined DHCP Option 100 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] option 100 hex 11 22

reset dhcp server conflict

Syntax

reset dhcp server conflict { all | ip ip-address }

View

User view

Default level

2: System level

Parameters

all: Clears the statistics of all IP address conflicts.

ip ip-address: Clears the conflict statistics of a specified IP address.

Description

Use reset dhcp server conflict to clear statistics of IP address conflicts.

Related commands: display dhcp server conflict.

Examples

# Clears the statistics of all IP address conflicts.

<Sysname> reset dhcp server conflict all

reset dhcp server ip-in-use

Syntax

reset dhcp server ip-in-use { all | ip ip-address | pool [ pool-name ] }

View

User view

Default level

2: System level

Parameters

all: Clears the IP address dynamic binding information of all DHCP address pools.

ip ip-address: Clears the dynamic binding information of a specified IP address.

pool [ pool-name ]: Clears the dynamic binding information of a specified address pool. The pool name is a string of 1 to 35 characters. If no pool name is specified, the dynamic binding information of all address pools is cleared.

Description

Use reset dhcp server ip-in-use to clear dynamic IP address binding information.

Related commands: display dhcp server ip-in-use.

Examples

# Clear the binding information of IP address 10.110.1.1.

<Sysname> reset dhcp server ip-in-use ip 10.110.1.1

reset dhcp server statistics

Syntax

reset dhcp server statistics

View

User view

Default level

2: System level

Parameters

None

Description

Use reset dhcp server statistics to clear the statistics of the DHCP server.

Related commands: display dhcp server statistics.

Examples

# Clear the statistics of the DHCP server.

<Sysname> reset dhcp server statistics

static-bind client-identifier

Syntax

static-bind client-identifier client-identifier

undo static-bind client-identifier

View

DHCP address pool view

Default level

2: System level

Parameters

client-identifier: The client ID of a static binding, a string with 4 to 160 characters in the format of H-H-H…, each H indicates 4 hex digits except the last H indicates 2 or 4 hex digits. For example, aabb-cccc-dd is a valid ID, but aabb-c-dddd and aabb-cc-dddd are both invalid.

Description

Use static-bind client-identifier to specify the client ID of a static binding in a DHCP address pool.

Use undo static-bind client-identifier to remove the client ID of a static binding from a DHCP address pool.

By default, no client ID is specified.

·     Use static-bind client-identifier command together with the static-bind ip-address to accomplish a static binding configuration.

·     The ID of the static binding of a client must be identical to the ID displayed by using the display dhcp client verbose command on the client. Otherwise, the client cannot obtain an IP address.

·     If you use the static-bind client-identifier or static-bind mac-address command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool, static-bind ip-address, static-bind mac-address, display dhcp server tree, and display dhcp client verbose.

Examples

# Bind the client ID aaaa-bbbb to the IP address 10.1.1.1 with the mask 255.255.255.0 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0

[Sysname-dhcp-pool-0] static-bind client-identifier aaaa-bbbb

static-bind ip-address

Syntax

static-bind ip-address ip-address [ mask-length | mask mask ]

undo static-bind ip-address

View

DHCP address pool view

Default level

2: System level

Parameters

ip-address: IP address of a static binding. If no mask and mask length is specified, the natural mask is used.

mask-length: Mask length of the IP address, which is the number of 1s in the mask, in the range of 1 to 30.

mask mask: Specifies the IP address mask, in dotted decimal format.

Description

Use static-bind ip-address to specify an IP address in a DHCP address pool for a static binding.

Use undo static-bind ip-address to remove the statically bound IP address.

By default, no IP address is statically bound in a DHCP address pool.

·     Use static-bind ip-address command together with the static-bind mac-address or static-bind client-identifier to accomplish a static binding configuration.

·     The IP address of the static binding cannot be an interface address of the DHCP server. Otherwise, an IP address conflict may occur, and the bound client cannot obtain an IP address correctly.

·     If you use the static-bind ip-address command repeatedly, the latest configuration will overwrite the previous one.

Related commands: dhcp server ip-pool, static-bind client-identifier, static-bind mac-address, and display dhcp server tree.

Examples

# Bind the client MAC address 0000-e03f-0305 to the IP address 10.1.1.1 with the mask 255.255.255.0 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0

[Sysname-dhcp-pool-0] static-bind mac-address 0000-e03f-0305

static-bind mac-address

Syntax

static-bind mac-address mac-address

undo static-bind mac-address

View

DHCP address pool view

Default level

2: System level

Parameters

mac-address: The MAC address of a static binding, in the format of H-H-H.

Description

Use static-bind mac-address to statically bind a MAC address to an IP address in a DHCP address pool.

Use undo static-bind mac-address to remove the statically bound MAC address.

By default, no MAC address is statically bound.

·     Use static-bind mac-address command together with the static-bind ip-address to complete a static binding configuration.

·     If you use the static-bind mac-address or static-bind client-identifier command repeatedly, the latest configuration will overwrite the previous one.

Relate commands: dhcp server ip-pool, static-bind client-identifier, static-bind ip-address, display dhcp server tree.

Examples

# Bind the client MAC address 0000-e03f-0305 to the IP address 10.1.1.1 with the mask 255.255.255.0 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0

[Sysname-dhcp-pool-0] static-bind mac-address 0000-e03f-0305

tftp-server domain-name

Syntax

tftp-server domain-name domain-name

undo tftp-server domain-name

View

DHCP address pool view

Default level

2: System level

Parameters

domain-name: TFTP server name, a string of 1 to 63 characters.

Description

Use tftp-server domain-name to specify a TFTP server name in a DHCP address pool.

Use undo tftp-server domain-name to remove the TFTP server name from a DHCP address pool.

By default, no TFTP server name is specified.

Using the tftp-server domain-name command repeatedly will overwrite the previous configuration.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the TFTP server name as aaa in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] tftp-server domain-name aaa

tftp-server ip-address

Syntax

tftp-server ip-address ip-address

undo tftp-server ip-address

View

DHCP address pool view

Default level

2: System level

Parameters

ip-address: TFTP server IP address.

Description

Use tftp-server ip-address to specify the TFTP server IP address in a DHCP address pool.

Use undo tftp-server ip-address to remove the TFTP server IP address from a DHCP address pool.

By default, no TFTP server address is specified.

Using the tftp-server ip-address command repeatedly will overwrite the previous configuration.

Related commands: dhcp server ip-pool and display dhcp server tree.

Examples

# Specify the TFTP server address 10.1.1.1 in DHCP address pool 0.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] tftp-server ip-address 10.1.1.1

vendor-class-identifier

Syntax

vendor-class-identifier hex-string&<1-255> ip range min-address max-address

undo vendor-class-identifier hex-string&<1-255>

View

DHCP extended address pool view

Default level

2: System level

Parameters

hex-string&<1-255>: A character string, which is used to match against Option 60 (vendor class identifier option). hex-string is a hexadecimal number ranging from 0 to FF. &<1-255> indicates that you can type up to 255 hexadecimal numbers, which are separated by spaces.

ip range min-address max-address: Specifies the IP address range for dynamic allocation. min-address is the lowest IP address and max-address is the highest IP address for dynamic allocation.

Description

Use vendor-class-identifier to specify an IP address range for the DHCP clients of a specified vendor.

Use undo vendor-class-identifier to restore the default.

By default, no IP address range is specified for the DHCP clients of any vendor.

After this feature is configured in an extended DHCP address pool, the DHCP server, when using the extended DHCP address pool to assign an IP address to a DHCP client, checks whether Option 60 in the DHCP request is the same as the character string configured with the vendor-class-identifier command. If yes, the DHCP server selects an IP address from the address range specified with this command. If not, the DHCP server selects one from the address range specified with the network ip range command.

Note the following:

·     Only extended address pools support this command.

·     The IP address range specified with this command must be included in that specified with the network ip range command.

Related commands: network ip range and network mask.

Examples

# Specify IP address rang 10.1.1.1 to 10.1.1.5 for the DHCP clients of vender a0 b0 0c.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0 extended

[Sysname-dhcp-pool-0] vendor-class-identifier a0 b0 0c ip range 10.1.1.1 10.1.1.5

voice-config

Syntax

voice-config { as-ip ip-address | fail-over ip-address dialer-string | ncp-ip ip-address | voice-vlan vlan-id { disable | enable } }

undo voice-config [ as-ip | fail-over | ncp-ip | voice-vlan ]

View

DHCP address pool view

Default level

2: System level

Parameters

as-ip ip-address: Specifies the IP address for the backup network calling processor. When the primary network calling processor is unavailable, the DHCP client uses the backup network calling processor.

fail-over ip-address dialer-string: Specifies the failover IP address and dialer string. The dialer-string is a string of 1 to 39 characters, which can be 0 to 9, and "*".

ncp-ip ip-address: Specifies the IP address for the primary network calling processor.

voice-vlan vlan-id: Specifies the voice VLAN ID, in the range of 2 to 4094.

·     disable: Disables the specified voice VLAN ID, meaning DHCP clients will not take this ID as their voice VLAN.

·     enable: Enables the specified voice VLAN ID, meaning DHCP clients will take this ID as their voice VLAN.

Description

Use voice-config to configure specified Option 184 contents in a DHCP address pool.

Use undo voice-config to remove specified Option 184 contents from a DHCP address pool.

By default, no Option 184 content is configured.

Specifying the IP address of a network calling processor first is necessary to make other configured parameters take effect.

Related commands: dhcp server ip-pool, and display dhcp server tree.

Examples

# Configure Option 184 in DHCP address pool 0: the primary network calling processor 10.1.1.1, backup network calling processor 10.2.2.2, voice VLAN ID 3 that is enabled, the failover IP address 10.3.3.3 and dialer string 99*.

<Sysname> system-view

[Sysname] dhcp server ip-pool 0

[Sysname-dhcp-pool-0] voice-config ncp-ip 10.1.1.1

[Sysname-dhcp-pool-0] voice-config as-ip 10.2.2.2

[Sysname-dhcp-pool-0] voice-config voice-vlan 3 enable

[Sysname-dhcp-pool-0] voice-config fail-over 10.3.3.3 99*


 

 

NOTE:

The DHCP relay agent configuration is supported only on VLAN interfaces.

 

dhcp relay address-check enable

Syntax

dhcp relay address-check enable

undo dhcp relay address-check enable

View

Interface view

Default level

2: System level

Parameters

None

Description

Use dhcp relay address-check enable to enable address check on the relay agent.

Use undo dhcp relay address-check enable to disable address check on the relay agent.

By default, the function is disabled.

With this feature enabled, the DHCP relay agent can dynamically record clients' IP-to-MAC bindings after clients get IP addresses through DHCP. It also supports static bindings. You can manually configure IP-to-MAC bindings on the DHCP relay agent, so that users can access external networks using fixed IP addresses.

Upon receiving an ARP packet, the DHCP relay agent matches the sender's IP and MAC addresses in the packet against the bindings (both dynamic and static). If no match is found, the DHCP relay agent does not learn the ARP entry. The sending host cannot access external networks via the DHCP relay agent.

·     This command can be executed only on VLAN interfaces.

·     The dhcp relay address-check enable command only checks IP and MAC addresses of clients.

Examples

# Enable address check on the DHCP relay agent.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay address-check enable

dhcp relay check mac-address

Syntax

dhcp relay check mac-address

undo dhcp relay check mac-address

View

Interface view

Default level

2: System level

Parameters

None

Description

Use dhcp relay check mac-address to enable MAC address check on the DHCP relay agent.

Use undo dhcp relay check mac-address to disable MAC address check on the DHCP relay agent.

By default, this function is disabled.

With this function enabled, the DHCP relay agent compares the chaddr field of a received DHCP request with the source MAC address field of the frame. If they are the same, the DHCP relay agent decides this request as valid and forwards it to the DHCP server. If not, the DHCP request is discarded.

DHCP relay agents change the source MAC addresses when forwarding DHCP packets. Therefore, you can enable MAC address check only on a DHCP relay agent directly connected to the DHCP clients. Otherwise, valid DHCP packets may be discarded and clients cannot obtain IP addresses.

Examples

# Enable MAC address check on the DHCP relay agent.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay check mac-address

dhcp relay client-detect enable

Syntax

dhcp relay client-detect enable

undo dhcp relay client-detect enable

View

Interface view

Default level

2: System level

Parameters

None

Description

Use dhcp relay client-detect enable to enable offline detection on the DHCP relay agent.

Use undo dhcp relay client-detect enable to disable offline detection on the DHCP relay agent.

By default, this function is disabled.

With this function enabled on an interface, the DHCP relay agent removes a client's IP-to-MAC binding entry when it is aged out, and sends a DHCP-RELEASE request to the DHCP server to release the IP address of the client.

Examples

# Enable offline detection on the DHCP relay agent.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay client-detect enable

dhcp relay information circuit-id format-type

Syntax

dhcp relay information circuit-id format-type { ascii | hex }

undo dhcp relay information circuit-id format-type

View

Interface view

Default level

2: System level

Parameters

ascii: Specifies the code type for the circuit ID sub-option as ascii.

hex: Specifies the code type for the circuit ID sub-option as hex.

Description

Use dhcp relay information circuit-id format-type to configure the code type for the non-user-defined circuit ID sub-option.

Use undo dhcp relay information circuit-id format-type to restore the default.

By default, the code type for the circuit ID sub-option depends on the specified padding format of Option 82. Each field has its own code type.

This command applies to configuring the non-user-defined circuit ID sub-option only. After you configure the padding content for the circuit ID sub-option using the dhcp relay information circuit-id string command, ASCII is adopted as the code type.

Related commands: display dhcp relay information.

Examples

# Configure the code type for the non-user-defined circuit ID sub-option as ascii.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information circuit-id format-type ascii

dhcp relay information circuit-id string

Syntax

dhcp relay information circuit-id string circuit-id

undo dhcp relay information circuit-id string

View

Interface view

Default level

2: System level

Parameters

circuit-id: Padding content for the user-defined circuit ID sub-option, a case-sensitive string of 3 to 63 characters.

Description

Use dhcp relay information circuit-id string to configure the padding content for the user-defined circuit ID sub-option.

Use undo dhcp relay information circuit-id string to restore the default.

By default, the padding content for the circuit ID sub-option depends on the padding format of Option 82.

After you configure the padding content for the circuit ID sub-option using this command, ASCII is adopted as the code type.

Related commands: dhcp relay information format and display dhcp relay information.

Examples

# Configure the padding content for the circuit ID sub-option as company001.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information circuit-id string company001

dhcp relay information enable

Syntax

dhcp relay information enable

undo dhcp relay information enable

View

Interface view

Default level

2: System level

Parameters

None

Description

Use dhcp relay information enable to enable the relay agent to support Option 82.

Use undo dhcp relay information enable to disable Option 82 support.

By default, Option 82 support is disabled on DHCP relay agent.

Related commands: display dhcp relay information.

Examples

# Enable Option 82 support on the relay agent.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information enable

dhcp relay information format

Syntax

dhcp relay information format { normal | verbose [ node-identifier { mac | sysname | user-defined node-identifier } ] }

undo dhcp relay information format

View

Interface view

Default level

2: System level

Parameters

normal: Specifies the normal padding format.

verbose: Specifies the verbose padding format.

node-identifier { mac | sysname | user-defined node-identifier }: Specifies access node identifier. By default, the node MAC address is used as the node identifier.

·     mac indicates using MAC address as the node identifier.

·     sysname indicates using the device name of a node as the node identifier.

·     user-defined node-identifier indicates using a specified character string as the node identifier, in which node-identifier is a string with 1 to 50 characters.

Description

Use dhcp relay information format to specify a padding format for Option 82.

Use undo dhcp relay information format to restore the default padding format.

The Option 82 padding format defaults to normal.

 

 

NOTE:

·     If configuring the handling strategy of the DHCP relay agent as replace, you need to configure a padding format of Option 82. If the handling strategy is keep or drop, you need not configure any padding format.

·     If sub-option 1 (node identifier) of Option 82 is padded with the device name (sysname) of a node, the device name must contain no spaces. Otherwise, the DHCP relay agent will drop the message.

 

Related commands: display dhcp relay information.

Examples

# Specify the verbose padding format for Option 82.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information enable

[Sysname-Vlan-interface1] dhcp relay information strategy replace

[Sysname-Vlan-interface1] dhcp relay information format verbose

dhcp relay information remote-id format-type

Syntax

dhcp relay information remote-id format-type { ascii | hex }

undo dhcp relay information remote-id format-type

View

Interface view

Default level

2: System view

Parameters

ascii: Specifies the code type for the remote ID sub-option as ascii.

hex: Specifies the code type for the remote ID sub-option as hex.

Description

Use dhcp relay information remote-id format-type to configure the code type for the non-user-defined remote ID sub-option.

Use undo dhcp relay information remote-id format-type to restore the default.

By default, the code type for the remote ID sub-option is HEX.

This command applies to configuring the non-user-defined remote ID sub-option only. After you configure the padding content for the remote ID sub-option using the dhcp relay information remote-id string command, ASCII is adopted as the code type.

Related commands: display dhcp relay information.

Examples

# Configure the code type for the non-user-defined remote ID sub-option as ascii.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information remote-id format-type ascii

dhcp relay information remote-id string

Syntax

dhcp relay information remote-id string { remote-id | sysname }

undo dhcp relay information remote-id string

View

Interface view

Default level

2: System level

Parameters

remote-id: Padding content for the user-defined remote ID sub-option, a case-sensitive string of 1 to 63 characters.

sysname: Specifies the device name as the padding content for the remote ID sub-option.

Description

Use dhcp relay information remote-id string to configure the padding content for the user-defined remote ID sub-option.

Use undo dhcp relay information remote-id string to restore the default.

By default, the padding content for the remote ID sub-option depends on the padding format of Option 82.

After you configure the padding content for the remote ID sub-option using this command, ASCII is adopted as the code type.

 

 

NOTE:

If you want to specify the character string sysname (a case-insensitive character string) as the padding content for the remote ID sub-option, you need to use quotation marks to make it take effect. For example, if you want to specify Sysname as the padding content for the remote ID sub-option, you need to enter the dhcp relay information remote-id string "Sysname" command.

 

Related commands: dhcp relay information format and display dhcp relay information.

Examples

# Configure the padding content for the remote ID sub-option as device001.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information remote-id string device001

dhcp relay information strategy

Syntax

dhcp relay information strategy { drop | keep | replace }

undo dhcp relay information strategy

View

Interface view

Default level

2: System level

Parameters

drop: Specifies to drop messages containing Option 82.

keep: Specifies to forward messages containing Option 82 without any change.

replace: Specifies to forward messages containing Option 82 after replacing the original Option 82 with the Option 82 padded in the specified padding format.

Description

Use dhcp relay information strategy to configure DHCP relay agent handling strategy for messages containing Option 82.

Use undo dhcp relay information strategy to restore the default handling strategy.

The handling strategy for messages containing Option 82 defaults to replace.

Related commands: display dhcp relay information.

Examples

# Configure the DHCP relay agent handling strategy for messages containing Option 82 as keep.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay information enable

[Sysname-Vlan-interface1] dhcp relay information strategy keep

dhcp relay release ip

Syntax

dhcp relay release ip client-ip

View

System view

Default level

2: System level

Parameters

client-ip: DHCP client IP address.

Description

Use dhcp relay release ip to request the DHCP server to release a specified client IP address.

Examples

# Request the DHCP server to release the IP address 1.1.1.1.

<Sysname> system-view

[Sysname] dhcp relay release ip 1.1.1.1

dhcp relay security static

Syntax

dhcp relay security static ip-address mac-address [ interface interface-type interface-number ]

undo dhcp relay security { ip-address | all | dynamic | interface interface-type interface-number | static }

View

System view

Default level

2: System level

Parameters

ip-address: Client IP address for creating a static binding.

mac-address: Client MAC address for creating a static binding, in the format H-H-H.

interface interface-type interface-number: Specifies a Layer 3 interface connecting to the DHCP client. interface-type interface-number specifies the interface type and interface number.

all: Specifies all client entries to be removed.

dynamic: Specifies dynamic client entries to be removed.

static: Specifies manual client entries to be removed.

Description

Use dhcp relay security static to configure a static client entry, which is the binding between IP address, MAC address, and Layer 3 interface on the relay agent.

Use undo dhcp relay security to remove specified client entries from the relay agent.

No manual client entry is configured on the DHCP relay agent by default.

·     When using the dhcp relay security static command to bind an interface to a static client entry, make sure that the interface is configured as a DHCP relay agent. Otherwise, entry conflicts may occur.

·     The undo dhcp relay security interface command is used to remove all the dynamic client entries from the interface.

Related commands: display dhcp relay security.

Examples

# Bind DHCP relay interface VLAN-interface 2 to IP address 10.10.1.1 and MAC address 0005-5d02-f2b3 of the client.

<Sysname> system-view

[Sysname] dhcp relay security static 10.10.1.1 0005-5d02-f2b3 interface vlan-interface 2

dhcp relay security refresh enable

Syntax

dhcp relay security refresh enable

undo dhcp relay security refresh enable

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp relay security refresh enable to enable the DHCP relay agent to periodically refresh dynamic client entries.

Use undo dhcp relay security refresh enable to disable periodic refresh of dynamic client entries.

By default, the DHCP relay agent is enabled to periodically refresh dynamic client entries.

If you disable the DHCP relay agent from periodically refreshing dynamic client entries, such entries do not age automatically. Therefore, if a client relinquishes its IP address, you need to manually remove the corresponding dynamic client entry on the DHCP relay agent.

Related commands: dhcp relay security tracker and dhcp relay security static.

Examples

# Disable the DHCP relay agent from periodically refreshing dynamic client entries.

<Sysname> system-view

[Sysname] undo dhcp relay security refresh enable

dhcp relay security tracker

Syntax

dhcp relay security tracker { interval | auto }

undo dhcp relay security tracker [ interval ]

View

System view

Default level

2: System level

Parameters

interval: Refreshing interval in seconds, in the range of 1 to 120.

auto: Specifies the auto refreshing interval, which is the value of 60 seconds divided by the number of binding entries. Thus, the more entries are, the shorter interval is, but the shortest interval is no less than 500 ms.

Description

Use dhcp relay security tracker to set a refreshing interval at which the relay agent contacts the DHCP server for refreshing dynamic bindings.

Use undo dhcp relay security tracker to restore the default interval.

The default refreshing interval is auto, the value of 60 seconds divided by the number of binding entries.

Related commands: display dhcp relay security tracker.

Examples

# Set the refreshing interval as 100 seconds.

<Sysname> system-view

[Sysname] dhcp relay security tracker 100

dhcp relay server-detect

Syntax

dhcp relay server-detect

undo dhcp relay server-detect

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp relay server-detect to enable unauthorized DHCP server detection.

Use undo dhcp relay server-detect to disable unauthorized DHCP server detection.

By default, unauthorized DHCP server detection is disabled.

With this function enabled, upon receiving a DHCP request, the DHCP relay agent will resolve from the request the IP addresses of all DHCP servers which ever offered IP addresses to the DHCP client and the receiving interface. Each server detected is recorded only once. The administrator can get this information from logs to check out unauthorized DHCP servers.

After the information of recorded DHCP servers is cleared, the relay agent will re-record server information following this mechanism.

Examples

# Enable unauthorized DHCP server detection.

<Sysname> system-view

[Sysname] dhcp relay server-detect

dhcp relay server-group

Syntax

dhcp relay server-group group-id ip ip-address

undo dhcp relay server-group group-id [ ip ip-address ]

View

System view

Default level

2: System level

Parameters

group-id: DHCP server group number, in the range of 0 to 19.

ip ip-address: DHCP server IP address.

Description

Use dhcp relay server-group to specify a DHCP server for a DHCP server group.

Use undo dhcp relay server-group to remove a DHCP server from a DHCP server group, if no ip ip-address is specified, all servers in the DHCP server group and the server group itself will be removed.

By default, no DHCP server is specified for a DHCP server group.

·     The IP address of a DHCP server and the IP address of the DHCP relay agent's interface that connects the DHCP client cannot be in the same network segment. Otherwise, the client may fail to obtain an IP address.

·     If a server group has been correlated to multiple interfaces, you need to cancel these correlations before removing the server group.

Related commands: display dhcp relay server-group.

Examples

# Specify DHCP server 1.1.1.1 for DHCP server group 1 on the relay agent.

<Sysname> system-view

[Sysname] dhcp relay server-group 1 ip 1.1.1.1

dhcp relay server-select

Syntax

dhcp relay server-select group-id

undo dhcp relay server-select

View

Interface view

Default level

2: System level

Parameters

group-id: DHCP server group number to be correlated, in the range of 0 to 19.

Description

Use dhcp relay server-select to correlate specified interfaces to a specified DHCP server group.

Use undo dhcp relay server-select to remove a configured correlation.

By default, no DHCP server group is correlated with an interface on the relay agent.

·     A DHCP server group can correlate with one or multiple DHCP relay agent interfaces.

·     A relay agent interface can only correlate with one DHCP server group, and a newly configured correlation overwrites the previous one. If the server group in the new correlation does not exist, the new configuration will not work. The interface still maintains the previous correlation.

·     The DHCP server group referenced in this command should have been configured by using the dhcp relay server-group command.

Related commands: dhcp relay server-group and display dhcp relay.

Examples

# Correlate VLAN-interface 1 to DHCP server group 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp relay server-select 1

dhcp select relay

Syntax

dhcp select relay

undo dhcp select relay

View

Interface view

Default level

2: System level

Parameters

None

Description

Use dhcp select relay to enable the relay agent on the current interface. Upon receiving requests from an enabled interface, the relay agent will forward these requests to outside DHCP servers for IP address allocation.

Use undo dhcp select relay to restore the default.

After DHCP is enabled, the DHCP server is enabled on an interface by default. Upon receiving a client's request from the interface, the DHCP server allocates an IP address from the DHCP address pool to the client.

When the operating mode of the interface is changed from DHCP server to DHCP relay agent, neither the IP address leases nor the authorized ARP entries will be deleted. However, these ARP entries may conflict with new ARP entries generated on the DHCP relay agent. Therefore, delete the existing IP address leases when changing the interface operating mode to DHCP relay agent.

Examples

# Enable the DHCP relay agent on VLAN-interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] dhcp select relay

display dhcp relay

Syntax

display dhcp relay { all | interface interface-type interface-number } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays information of DHCP server groups that all interfaces correspond to.

interface interface-type interface-number: Displays information of the DHCP server group that a specified interface corresponds to.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay to display information about DHCP server groups correlated to an interface or all interfaces.

Examples

# Display information about DHCP server groups correlated to all interfaces.

<Sysname> display dhcp relay all

    Interface name            Server-group

    Vlan-interface10                   2

Table 7 Command output

Field

Description

Server-group

DHCP server group number correlated to the interface.

 

display dhcp relay information

Syntax

display dhcp relay information { all | interface interface-type interface-number } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays the Option 82 configuration information of all interfaces.

interface interface-type interface-number: Displays the Option 82 configuration information of a specified interface.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay information to display Option 82 configuration information on the DHCP relay agent.

Examples

# Display the Option 82 configuration information of all interfaces.

<Sysname> display dhcp relay information all

Interface: Vlan-interface100

    Status: Enable

    Strategy: Replace

    Format: Verbose

    Circuit ID format-type: HEX

    Remote ID format-type: ASCII

    Node identifier: aabbcc

    User defined:

         Circuit ID: company001

Interface: Vlan-interface200

    Status: Enable

    Strategy: Keep

    Format: Normal

    Circuit ID format-type: HEX

    Remote ID format-type: ASCII

    User defined:

         Remote ID: device001

Table 8 Command output

Field

Description

Interface

Interface name.

Status

Option 82 state: Enable or Disable.

Strategy

Handling strategy for requesting messages containing Option 82, which can be Drop, Keep, or Replace.

Format

Padding format of Option 82, which can be Normal or Verbose.

Circuit ID format-type

Non-user-defined code type of the circuit ID sub-option, which can be ASCII or HEX.

Remote ID format-type

Non-user-defined code type of the remote ID sub-option, which can be ASCII or HEX.

Node identifier

Access node identifier.

User defined

Content of user-defined sub-options.

Circuit ID

User-defined padding content of the circuit ID sub-option.

Remote ID

User-defined padding content of the remote ID sub-option.

 

display dhcp relay security

Syntax

display dhcp relay security [ ip-address | dynamic | static ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

ip-address: Displays the binding information of an IP address.

dynamic: Displays information about dynamic bindings.

static: Displays information about static bindings.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay security to display information about bindings of DHCP relay agents. If no parameter is specified, information about all bindings will be displayed.

You need to enable address check on the DHCP relay agent before it can generate dynamic client entries.

Examples

# Display information about all bindings.

<Sysname> display dhcp relay security

IP Address      MAC Address     Type       Interface

 10.1.1.1       00e0-0000-0001  Static     Vlan1

 10.1.1.5       00e0-0000-0000  Static     Vlan2

---   2 dhcp-security item(s) found   ---

Table 9 Command output

Field

Description

IP Address

Client IP address.

MAC Address

Client MAC address.

Type

Type of binding, including dynamic, static, and temporary.

Interface

Layer 3 interface connecting to the DHCP client. If no interface is recorded in the binding entry, "N/A" is displayed.

 

display dhcp relay security statistics

Syntax

display dhcp relay security statistics [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay security statistics to display statistics information about bindings of DHCP relay agents.

You need to enable address check on the DHCP relay agent before it can generate dynamic client entries.

Examples

# Display statistics about bindings of DHCP relay agents.

<Sysname> display dhcp relay security statistics

Static Items      :1

Dynamic Items     :0

Temporary Items   :0

All Items         :1

Table 10 Command output

Field

Description

Static Items

Static binding items

Dynamic Items

Dynamic binding items

Temporary Items

Temporary binding items

All Items

All binding items

 

display dhcp relay security tracker

Syntax

display dhcp relay security tracker [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay security tracker to display the interval for refreshing dynamic bindings on the relay agent.

Examples

# Display the interval for refreshing dynamic bindings on the relay agent.

<Sysname> display dhcp relay security tracker

 Current tracker interval : 10s

The interval is 10 seconds.

display dhcp relay server-group

Syntax

display dhcp relay server-group { group-id | all } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

group-id: Displays the information of the specified DHCP server group numbered from 0 to 19.

all: Displays the information of all DHCP server groups.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay server-group to display the configuration information of a specified or all DHCP server groups.

Examples

# Display IP addresses of DHCP servers in DHCP server group 1.

<Sysname> display dhcp relay server-group 1

    No.            Group IP

    1              1.1.1.1

    2              1.1.1.2

Table 11 Command output

Field

Description

No.

Sequence number

Group IP

IP address in the server group

 

display dhcp relay statistics

Syntax

display dhcp relay statistics [ server-group { group-id | all } ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

group-id: Specifies a server group number in the range of 0 to 19 about which to display DHCP packet statistics.

all: Specifies all server groups about which to display DHCP packet statistics. Information for each group will be displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp relay statistics to display DHCP packet statistics related to a specified or all DHCP server groups.

If no parameter (server-group and all) is specified, all DHCP packet statistics on the relay agent will be displayed.

Related commands: reset dhcp relay statistics.

Examples

# Display all DHCP packet statistics on the relay agent.

<Sysname> display dhcp relay statistics

     Bad packets received:                    0

     DHCP packets received from clients:      0

         DHCPDISCOVER packets received:       0

         DHCPREQUEST packets received:        0

         DHCPINFORM packets received:         0

         DHCPRELEASE packets received:        0

         DHCPDECLINE packets received:        0

         BOOTPREQUEST packets received:       0

     DHCP packets received from servers:      0

         DHCPOFFER packets received:          0

         DHCPACK packets received:            0

         DHCPNAK packets received:            0

         BOOTPREPLY packets received:         0

     DHCP packets relayed to servers:         0

         DHCPDISCOVER packets relayed:        0

         DHCPREQUEST packets relayed:         0

         DHCPINFORM packets relayed:          0

         DHCPRELEASE packets relayed:         0

         DHCPDECLINE packets relayed:         0

         BOOTPREQUEST packets relayed:        0

     DHCP packets relayed to clients:         0

         DHCPOFFER packets relayed:           0

         DHCPACK packets relayed:             0

         DHCPNAK packets relayed:             0

         BOOTPREPLY packets relayed:          0

     DHCP packets sent to servers:            0

         DHCPDISCOVER packets sent:           0

         DHCPREQUEST packets sent:            0

         DHCPINFORM packets sent:             0

         DHCPRELEASE packets sent:            0

         DHCPDECLINE packets sent:            0

         BOOTPREQUEST packets sent:           0

     DHCP packets sent to clients:            0

         DHCPOFFER packets sent:              0

         DHCPACK packets sent:                0

         DHCPNAK packets sent:                0

         BOOTPREPLY packets sent:             0

# Display DHCP packet statistics related to every server group on the relay agent.

<Sysname> display dhcp relay statistics server-group all

DHCP relay server-group           #0

     Packet type               Packet number

 Client -> Server:

     DHCPDISCOVER                   0

     DHCPREQUEST                    0

     DHCPINFORM                     0

     DHCPRELEASE                    0

     DHCPDECLINE                    0

     BOOTPREQUEST                   0

 Server -> Client:

     DHCPOFFER                      0

     DHCPACK                        0

     DHCPNAK                        0

     BOOTPREPLY                     0

reset dhcp relay statistics

Syntax

reset dhcp relay statistics [ server-group group-id ]

View

User view

Default level

1: Monitor level

Parameters

server-group group-id: Specifies a server group ID (in the range of 0 to 19) about which to remove statistics from the relay agent.

Description

Use reset dhcp relay statistics to remove statistics from the relay agent.

If no server-group is specified, all statistics will be removed from the relay agent.

Related commands: display dhcp relay statistics.

Examples

# Remove all statistics from the DHCP relay agent.

<Sysname> reset dhcp relay statistics


 

 

NOTE:

·     The DHCP client configuration is supported only on VLAN interfaces.

·     When multiple VLAN interfaces having the same MAC address use DHCP for IP address acquisition via a relay agent, the DHCP server cannot be the Windows 2000 Server or Windows 2003 Server.

 

display dhcp client

Syntax

display dhcp client [ verbose ] [ interface interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

verbose: Specifies verbose DHCP client information to be displayed.

interface interface-type interface-number: Specifies an interface of which to display DHCP client information.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp client to display DHCP client information. If no interface interface-type interface-number is specified, DHCP client information of all interfaces will be displayed.

Examples

# Display DHCP client information of all interfaces.

<Sysname> display dhcp client

Vlan-interface1 DHCP client information:

 Current machine state: BOUND

 Allocated IP: 40.1.1.20 255.255.255.0

 Allocated lease: 259200 seconds, T1: 129600 seconds, T2: 226800 seconds

 DHCP server: 40.1.1.2

# Display verbose DHCP client information.

<Sysname> display dhcp client verbose

Vlan-interface1 DHCP client information:

 Current machine state: BOUND

 Allocated IP: 40.1.1.20 255.255.255.0

 Allocated lease: 259200 seconds, T1: 129600 seconds, T2: 226800 seconds

 Lease from 2005.08.13 15:37:59   to   2005.08.16 15:37:59

 DHCP server: 40.1.1.2

 Transaction ID: 0x1c09322d

 Default router: 40.1.1.2

 Classless static route:

   Destination: 1.1.0.1, Mask: 255.0.0.0, NextHop: 192.168.40.16

   Destination: 10.198.122.63, Mask: 255.255.255.255, NextHop: 192.168.40.16

 DNS server: 44.1.1.11

 DNS server: 44.1.1.12

 Domain name: ddd.com

 Boot server: 200.200.200.200  1.1.1.1

 Client ID: 3030-3066-2e65-3234-

            392e-3830-3438-2d56-

            6c61-6e2d-696e-7465-

            7266-6163-6531

T1 will timeout in 1 day 11 hours 58 minutes 52 seconds.

Table 12 Command output

Field

Description

Vlan-interface1 DHCP client information

Information of the interface acting as the DHCP client.

Current machine state

Current state of the DHCP client:

·     HALTIndicates that the client stops applying for an IP address.

·     INITIndicates the initialization state.

·     SELECTINGIndicates that the client has sent out a DHCP-DISCOVER message in search of a DHCP server and is waiting for the response from DHCP servers.

·     REQUESTINGIndicates that the client has sent out a DHCP-REQUEST message requesting for an IP address and is waiting for the response from DHCP servers.

·     BOUNDIndicates that the client has received the DHCP-ACK message from a DHCP server and obtained an IP address successfully.

·     RENEWINGIndicates that the T1 timer expires.

·     REBOUNDINGIndicates that the T2 timer expires.

Allocated IP

The IP address allocated by the DHCP server.

Allocated lease

The allocated lease time.

T1

The 1/2 lease time (in seconds) of the DHCP client IP address.

T2

The 7/8 lease time (in seconds) of the DHCP client IP address.

Lease from….to….

The start and end time of the lease.

DHCP Server

DHCP server IP address that assigned the IP address.

Transaction ID

Transaction ID, a random number chosen by the client to identify an IP address allocation.

Default router

The gateway address assigned to the client.

Classless static route

Classless static routes assigned to the client.

Static route

Classful static routes assigned to the client.

DNS server

The DNS server address assigned to the client.

Domain name

The domain name suffix assigned to the client.

Boot server

PXE server addresses (up to 16 addresses) specified for the DHCP client, which are obtained through Option 43.

Client ID

Client ID.

T1 will timeout in 1 day 11 hours 58 minutes 52 seconds.

How long the T1 (1/2 lease time) timer will timeout.

 

ip address dhcp-alloc

Syntax

ip address dhcp-alloc [ client-identifier mac interface-type interface-number ]

undo ip address dhcp-alloc

View

Interface view

Default level

2: System level

Parameters

client-identifier mac interface-type interface-number: Enables an interface to use its MAC address as the client ID to obtain an IP address.

Description

Use ip address dhcp-alloc to configure an interface to use DHCP for IP address acquisition.

Use undo ip address dhcp-alloc to cancel an interface from using DHCP.

By default, an interface does not use DHCP for IP address acquisition.

 

 

NOTE:

·     If no parameter is specified, the client uses a character string comprised of the current interface name and MAC address as its ID for address acquisition.

·     The DHCP client sends a DHCP-RELEASE message for releasing the IP address obtained via DHCP, if the interface of the client is down, the message cannot be sent.

·     For a sub interface that obtained an IP address via DHCP, using the shutdown command on its primary interface does not make the DHCP client send a DHCP-RELEASE message for releasing the sub interface's IP address.

 

Examples

# Configure VLAN-interface 1 to use DHCP for IP address acquisition.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] ip address dhcp-alloc

 


 

 

NOTE:

A DHCP snooping enabled device does not work if it is between the DHCP relay agent and DHCP server, and it can work when it is between the DHCP client and relay agent or between the DHCP client and server.

 

dhcp-snooping

Syntax

dhcp-snooping

undo dhcp-snooping

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp-snooping to enable DHCP snooping.

Use undo dhcp-snooping to disable DHCP snooping.

With DHCP snooping disabled, all ports can forward responses from any DHCP servers and does not record binding information about MAC addresses of DHCP clients and the obtained IP addresses.

By default, DHCP snooping is disabled.

Related commands: display dhcp-snooping.

Examples

# Enable DHCP snooping.

<Sysname> system-view

[Sysname] dhcp-snooping

dhcp-snooping binding database filename

Syntax

dhcp-snooping binding database filename filename

undo dhcp-snooping binding database filename

View

System view

Default level

2: System level

Parameters

filename: File name. For how to define the file name, see Fundamentals Configuration Guide.

Description

Use dhcp-snooping binding database filename to specify the name of the file for storing DHCP snooping entries.

Use undo dhcp-snooping binding database filename to restore the default.

By default, no file name is specified.

 

 

NOTE:

·     If no file with the specified name is found, the device will automatically create the file upon storing a DHCP snooping binding.

·     DHCP snooping entries are stored immediately after this command is used, and then updated at the interval set by the dhcp-snooping binding database update interval command.

 

Related commands: dhcp-snooping binding database update interval.

Examples

# Specify the name of the file for storing DHCP snooping entries as database.dhcp.

<Sysname> system-view

[Sysname] dhcp-snooping binding database filename database.dhcp

dhcp-snooping binding database update interval

Syntax

dhcp-snooping binding database update interval minutes

undo dhcp-snooping binding database update interval

View

System view

Default level

2: System level

Parameters

minutes: Refresh interval in minutes, in the range of 1 to 14400.

Description

Use dhcp-snooping binding database update interval to set the interval at which the DHCP snooping entry file is refreshed.

Use undo dhcp-snooping binding database update interval to restore the default.

By default, the DHCP snooping entry file is not refreshed periodically.

 

 

NOTE:

·     With this command configured, DHCP snooping will check bindings periodically. If a binding is added or removed during an interval, DHCP snooping will add or remove this binding to or from the file at the end of this interval. If no change occurs within the interval, DHCP snooping will not refresh the file.

·     This command takes effect only when the DHCP snooping entry file is specified.

 

Related commands: dhcp-snooping binding database filename.

Examples

# Configure the DHCP snooping entry file to be refreshed every 10 minutes.

<Sysname> system-view

[Sysname] dhcp-snoooping binding database update interval 10

dhcp-snooping binding database update now

Syntax

dhcp-snooping binding database update now

View

System view

Default level

2: System level

Parameters

None

Description

Use dhcp-snooping binding database update now to store DHCP snooping entries to the file.

 

 

NOTE:

·     DHCP snooping entries will be stored to the file each time this command is used.

·     This command takes effect only when the DHCP snooping entry file is specified.

 

Related commands: dhcp-snooping binding database filename.

Examples

# Store DHCP snooping entries to the file.

<Sysname> system-view

[Sysname] dhcp-snooping binding database update now

dhcp-snooping check mac-address

Syntax

dhcp-snooping check mac-address

undo dhcp-snooping check mac-address

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

None

Description

Use dhcp-snooping check mac-address to enable MAC address check on a DHCP snooping device.

Use undo dhcp-snooping check mac-address to disable MAC address check of DHCP snooping.

By default, this function is disabled.

With this function enabled, the DHCP snooping device compares the chaddr field of a received DHCP request with the source MAC address field in the frame. If they are the same, the DHCP snooping device decides this request valid and forwards it to the DHCP server. If not, the DHCP request is discarded.

Examples

# Enable MAC address check of DHCP snooping.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping check mac-address

dhcp-snooping check request-message

Syntax

dhcp-snooping check request-message

undo dhcp-snooping check request-message

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

None

Description

Use dhcp-snooping check request-message to enable DHCP-REQUEST message check of DHCP snooping.

Use undo dhcp-snooping check request-message to disable DHCP-REQUEST message check of the DHCP snooping.

By default, this function is disabled.

With this function enabled, upon receiving a DHCP-REQUEST message, a DHCP snooping device searches local DHCP snooping entries for the corresponding entry of the message. If an entry is found, the DHCP snooping device compares the entry with the message information. If they are consistent, the DHCP-REQUEST message is considered as valid lease renewal request and forwarded to the DHCP server. If they are not consistent, the messages is considered as forged lease renewal request and discarded. If no corresponding entry is found locally, the message is considered valid and forwarded to the DHCP server.

Examples

# Enable DHCP-REQUEST message check of DHCP snooping.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping check request-message

dhcp-snooping information circuit-id format-type

Syntax

dhcp-snooping information circuit-id format-type { ascii | hex }

undo dhcp-snooping information circuit-id format-type

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

ascii: Specifies the code type for the circuit ID sub-option as ascii.

hex: Specifies the code type for the circuit ID sub-option as hex.

Description

Use dhcp-snooping information circuit-id format-type to configure the code type for the non-user-defined circuit ID sub-option.

Use undo dhcp-snooping information circuit-id format-type to restore the default.

By default, the code type for the circuit ID sub-option depends on the padding format of Option 82. Each field has its own code type.

This command applies to configuring the non-user-defined circuit ID sub-option only. After you configure the padding content for the circuit ID sub-option using the dhcp-snooping information circuit-id string command, ASCII is adopted as the code type.

Related commands: display dhcp-snooping information.

Examples

# Configure the padding format for the non-user-defined circuit ID sub-option as ascii.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information circuit-id format-type ascii

dhcp-snooping information circuit-id string

Syntax

dhcp-snooping information [ vlan vlan-id ] circuit-id string circuit-id

undo dhcp-snooping information [ vlan vlan-id ] circuit-id string

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.

circuit-id: Padding content for the user-defined circuit ID sub-option, a case-sensitive string of 3 to 63 characters.

Description

Use dhcp-snooping information circuit-id string to configure the padding content for the user-defined circuit ID sub-option.

Use undo dhcp-snooping information circuit-id string to restore the default.

By default, the padding content for the circuit ID sub-option depends on the padding format of Option 82.

·     After you configure the padding content for the circuit ID sub-option using this command, ASCII is adopted as the code type.

·     If a VLAN is specified, the configured circuit ID sub-option only takes effect within the VLAN. If no VLAN is specified, the configured circuit ID sub-option takes effect in all VLANs. The former case has a higher priority. The circuit ID sub-option specified for a VLAN will be padded for packets within the VLAN.

Related commands: dhcp-snooping information format and display dhcp-snooping information.

Examples

# Configure the padding content for the user-defined circuit ID sub-option as company001.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information circuit-id string company001

dhcp-snooping information enable

Syntax

dhcp-snooping information enable

undo dhcp-snooping information enable

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

None

Description

Use dhcp-snooping information enable to configure DHCP snooping to support Option 82.

Use undo dhcp-snooping information enable to disable this function.

By default, DHCP snooping does not support Option 82.

Related commands: display dhcp-snooping information.

Examples

# Configure DHCP snooping to support Option 82.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information enable

dhcp-snooping information format

Syntax

dhcp-snooping information format { normal | verbose [ node-identifier { mac | sysname | user-defined node-identifier } ] }

undo dhcp-snooping information format

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

normal: Specifies the normal padding format.

verbose: Specifies the verbose padding format.

node-identifier { mac | sysname | user-defined node-identifier }: Specifies access node identifier. By default, the node MAC address is used as the node identifier.

·     mac indicates using MAC address as the node identifier.

·     sysname indicates using the device name of a node as the node identifier.

·     user-defined node-identifier indicates using a specified character string as the node identifier, in which node-identifier is a string of 1 to 50 characters.

Description

Use dhcp-snooping information format to specify the padding format for Option 82.

Use undo dhcp-snooping information format to restore the default.

By default, the padding format for Option 82 is normal.

When you use the undo dhcp-snooping information format command, if the verbose node-identifier argument is not specified, the padding format will be restored to normal. If the verbose node-identifier argument is specified, the padding format will be restored to verbose with MAC address as the node identifier.

Related commands: display dhcp-snooping information.

Examples

# Specify the padding format as verbose for Option 82.

<Sysname> system-view

[Sysname] interface gigabitethernet1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information enable

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information strategy replace

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information format verbose

dhcp-snooping information remote-id format-type

Syntax

dhcp-snooping information remote-id format-type { ascii | hex }

undo dhcp-snooping information remote-id format-type

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

ascii: Specifies the code type for the remote ID sub-option as ascii.

hex: Specifies the code type for the remote ID sub-option as hex.

Description

Use dhcp-snooping information remote-id format-type to configure the code type for the non-user-defined remote ID sub-option.

Use undo dhcp-snooping information remote-id format-type to restore the default.

By default, the code type for the remote ID sub-option is HEX.

 

 

NOTE:

This command applies to configuring a non-user-defined remote ID sub-option only. After you configure the padding content for the remote ID sub-option using the dhcp-snooping information remote-id string command, ASCII is adopted as the code type.

 

Related commands: display dhcp-snooping information.

Examples

# Configure the code type for the non-user-defined remote ID sub-option as ascii.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information remote-id format-type ascii

dhcp-snooping information remote-id string

Syntax

dhcp-snooping information [ vlan vlan-id ] remote-id string { remote-id | sysname }

undo dhcp-snooping information [ vlan vlan-id ] remote-id string

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.

remote-id: Padding content for the user-defined circuit ID sub-option, a case-sensitive string of 1 to 63 characters.

sysname: Specifies the device name as the padding content for the remote ID sub-option.

Description

Use dhcp-snooping information remote-id string to configure the padding content for the user-defined remote ID sub-option.

Use undo dhcp-snooping information remote-id string to restore the default.

By default, the padding content for the remote ID sub-option depends on the padding format of Option 82.

·     After you configure the padding content for the remote ID sub-option using this command, ASCII is adopted as the code type.

·     If a VLAN is specified, the configured remote ID sub-option only takes effect within the VLAN. If no VLAN is specified, the configured remote ID sub-option takes effect in all VLANs. The former case has a higher priority. The remote ID sub-option configured for a VLAN will be padded for the packets within the VLAN.

 

 

NOTE:

If you want to specify the character string sysname (a case-insensitive character string) as the padding content for the remote ID sub-option, you need to use quotation marks to make it take effect. For example, if you want to specify Sysname as the padding content for the remote ID sub-option, you need to enter the dhcp relay information remote-id string "Sysname" command.

 

Related commands: dhcp-snooping information format and display dhcp-snooping information.

Examples

# Configure the padding content for the remote ID sub-option as device001.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname- GigabitEthernet1/0/1] dhcp-snooping information remote-id string device001

dhcp-snooping information strategy

Syntax

dhcp-snooping information strategy { drop | keep | replace }

undo dhcp-snooping information strategy

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

drop: Drops the requesting message containing Option 82.

keep: Forwards the requesting message containing Option 82 without changing Option 82.

replace: Forwards the requesting message containing Option 82 after replacing the original Option 82 with the one padded in specified format.

Description

Use dhcp-snooping information strategy to configure the handling strategy for Option 82 in requesting messages.

Use undo dhcp-snooping information strategy to restore the default.

By default, the handling strategy for Option 82 in requesting messages is replace.

Related commands: display dhcp-snooping information.

Examples

# Configure the handling strategy for Option 82 in requesting messages as keep.

<Sysname> system-view

[Sysname] interface gigabitethernet1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information enable

[Sysname-GigabitEthernet1/0/1] dhcp-snooping information strategy keep

dhcp-snooping trust

Syntax

dhcp-snooping trust [ no-user-binding ]

undo dhcp-snooping trust

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view

Default level

2: System level

Parameters

no-user-binding: Specifies the port not to record the clients' IP-to-MAC bindings in DHCP requests it receives. The command without this keyword records the IP-to-MAC bindings of clients.

Description

Use dhcp-snooping trust to configure a port as a trusted port.

Use undo dhcp-snooping trust to restore the default state of a port.

All ports are untrusted by default.

After enabling DHCP snooping, you need to specify the ports connected to the valid DHCP servers as trusted to make sure that DHCP clients can obtain valid IP addresses.

Related commands: display dhcp-snooping trust.

Examples

# Specify GigabitEthernet 1/0/1 as a trusted port and enable it to record the IP-to-MAC bindings of clients.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dhcp-snooping trust

display dhcp-snooping

Syntax

display dhcp-snooping [ ip ip-address ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

ip ip-address: Displays the DHCP snooping entries corresponding to the specified IP address.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp-snooping to display DHCP snooping entries.

 

 

NOTE:

Only the DHCP snooping entries containing IP-to-MAC bindings that are present both in the DHCP-ACK and DHCP-REQUEST messages are displayed by using the display dhcp-snooping command.

 

Related commands: dhcp-snooping and reset dhcp-snooping.

Examples

# Display all DHCP snooping entries.

<Sysname> display dhcp-snooping

 DHCP Snooping is enabled.

 The client binding table for all untrusted ports.

 Type : D--Dynamic , S--Static , R--Recovering

 Type IP Address      MAC Address    Lease        VLAN SVLAN Interface

 ==== =============== ============== ============ ==== ===== =================

 D    10.1.1.1        00e0-fc00-0006 286          1    2     GigabitEthernet1/0/1

---   1 dhcp-snooping item(s) found   ---

Table 13 Command output

Field

Description

Type

Entry type:

·     DDynamic

·     SStatic. Static DHCP snooping entries are not supported.

·     RSpecifies that the DHCP snooping entry is being restored through the DHCP snooping entry file, and the interface in the entry is invalid.

IP Address

IP address assigned to the DHCP client.

MAC Address

MAC address of the DHCP client.

Lease

Lease period left (in seconds).

VLAN

Outer VLAN tag when DHCP snooping and QinQ are both enabled or the DHCP snooping device receives a packet with two VLAN tags, or VLAN where the port connecting the DHCP client resides.

SVLAN

Inner VLAN tag when DHCP snooping and QinQ are both enabled or the DHCP snooping device receives a packet with two VLAN tags, or 0.

Interface

Port to which the DHCP client is connected.

 

display dhcp-snooping binding database

Syntax

display dhcp-snooping binding database [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp-snooping binding database to display the DHCP snooping entry file information.

Examples

# Display the DHCP snooping entry file information.

<Sysname> display dhcp-snooping binding database

File name             :   flash:/database.dhcp

Update interval   :   10 minutes

Latest read time     :   Jul 15 2008 16:38:22

Latest write time     :   Jul 15 2008 16:38:24

Status           :   Last write succeeded.

Table 14 Command output

Field

Description

File name

File name.

Update interval

Interval at which the DHCP snooping entry file is refreshed.

Latest read time

The last time when the file is read.

Latest write time

The last time when the file is written.

Status

Indicates whether the file was written successfully last time.

 

display dhcp-snooping information

Syntax

display dhcp-snooping information { all | interface interface-type interface-number } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays the Option 82 configuration information of all Layer 2 Ethernet interfaces.

interface interface-type interface-number: Displays the Option 82 configuration information of a specified interface.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp-snooping information to display Option 82 configuration information on the DHCP snooping device.

Examples

# Display the Option 82 configuration information of all interfaces.

<Sysname> display dhcp-snooping information all

Interface: GigabitEthernet 1/0/1

    Status: Enable

    Strategy: Replace

    Format: Verbose

    Circuit ID format-type: HEX

    Remote ID format-type: ASCII

    Node identifier: aabbcc

    User defined:

        Circuit ID: company001

Interface: GigabitEthernet 1/0/2

    Status: Disable

    Strategy: Keep

    Format: Normal

    Circuit ID format-type: HEX

    Remote ID format-type: ASCII

    User defined:

        Circuit ID: company001

        Remote ID: device001

        VLAN 10:

            Circuit ID: vlan10@company001

        VLAN 20:

            Remote ID: device001

display dhcp-snooping packet statistics

Syntax

display dhcp-snooping packet statistics [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters

Description

Use display dhcp-snooping packet statistics to display DHCP packet statistics on the DHCP snooping device.

Related commands: reset dhcp-snooping packet statistics.

Examples

# Display DHCP packet statistics on the DHCP snooping device.

<Sysname> display dhcp-snooping packet statistics

 DHCP packets received                  : 100

 DHCP packets sent                      : 200

 Packets dropped due to rate limitation : 20

 Dropped invalid packets                : 0

display dhcp-snooping trust

Syntax

display dhcp-snooping trust [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display dhcp-snooping trust to display information about trusted ports.

Related commands: dhcp-snooping trust.

Examples

# Display information about trusted ports.

<Sysname> display dhcp-snooping trust

 DHCP Snooping is enabled.

 DHCP Snooping trust becomes active.

 Interface                                       Trusted

 =========================                    ============

GigabitEthernet1/0/1                             Trusted

The output shows that DHCP snooping is enabled, DHCP snooping trust is active, and port GigabitEthernet 1/0/1 is trusted.

reset dhcp-snooping

Syntax

reset dhcp-snooping { all | ip ip-address }

View

User view

Default level

1: Monitor level

Parameters

all: Clears all DHCP snooping entries.

ip ip-address: Clears the DHCP snooping entries of the specified IP address.

Description

Use reset dhcp-snooping to clear DHCP snooping entries.

Related commands: display dhcp-snooping.

Examples

# Clear all DHCP snooping entries.

<Sysname> reset dhcp-snooping all

reset dhcp-snooping packet statistics

Syntax

reset dhcp-snooping packet statistics

View

User view

Default level

2: System level

Parameters

None

Description

Use reset dhcp-snooping packet statistics to clear DHCP packet statistics on the DHCP snooping device.

Related commands: display dhcp-snooping packet statistics.

Examples

# Clear DHCP packet statistics on the DHCP snooping device.

<Sysname> reset dhcp-snooping packet statistics


 

 

NOTE:

·     BOOTP client configuration can only be used on VLAN interfaces.

·     If several VLAN interfaces sharing the same MAC address obtain IP addresses through a BOOTP relay agent, the BOOTP server cannot be a Windows Server 2000 or Windows Server 2003.

·     You cannot configure an interface of an aggregation group as a BOOTP client.

 

display bootp client

Syntax

display bootp client [ interface interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

interface interface-type interface-number: Displays the BOOTP client information of the interface.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display bootp client to display related information about a BOOTP client.

·     If interface interface-type interface-number is not specified, the command displays information about BOOTP clients on all interfaces.

·     If interface interface-type interface-number is specified, the command displays information about the BOOTP client on the specified interface.

Examples

# Display related information of the BOOTP client on VLAN-interface 1.

<Sysname> display bootp client interface vlan-interface 1

Vlan-interface1 BOOTP client information:

Allocated IP: 169.254.0.2 255.255.0.0

Transaction ID = 0x3d8a7431

Mac Address  00e0-fc0a-c3ef

Table 15 Command output

Field

Description

Vlan-interface1 BOOTP client information

Information of the interface serving as a BOOTP client.

Allocated IP

BOOTP client's IP address allocated by the BOOTP server.

Transaction ID

Value of the XID field in a BOOTP message, which is a random number chosen when the BOOTP client sends a BOOTP request to the BOOTP server. It is used to match a response message from the BOOTP server. If the values of the XID field are different in the BOOTP response and request, the BOOTP client will drop the BOOTP response.

Mac Address

MAC address of a BOOTP client.

 

ip address bootp-alloc

Syntax

ip address bootp-alloc

undo ip address bootp-alloc

View

Interface view

Default level

2: System level

Parameters

None

Description

Use ip address bootp-alloc to enable an interface to obtain an IP address through BOOTP.

Use undo ip address bootp-alloc to disable the interface from obtaining an IP address through BOOTP.

By default, an interface does not obtain an IP address through BOOTP.

Related commands: display bootp client.

Examples

# Configure VLAN-interface 1 to obtain IP address through BOOTP protocol.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] ip address bootp-alloc

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网