Example: Configuring DHCP relay agent-based dynamic IPv4SG

As shown in Figure 153, DHCP relay agent is enabled on the switch. The host obtains an IP address from the DHCP server through the DHCP relay agent.

Enable dynamic IPv4SG on VLAN-interface 100 to filter incoming packets by using the IPv4SG bindings generated based on DHCP relay entries.

1. Configure dynamic IPv4SG:

   # Configure IP addresses for the interfaces. (Details not shown.)

   # Enable IPv4SG on VLAN-interface 100 and verify the source IP address and MAC address for dynamic IPSG.

   <Switch> system-view
   [Switch] interface vlan-interface 100
   [Switch-Vlan-interface100] ip verify source ip-address mac-address
   [Switch-Vlan-interface100] quit
   

2. Configure the DHCP relay agent:

   # Enable the DHCP service.

   [Switch] dhcp enable
   

   # Enable recording DHCP relay entries.

   [Switch] dhcp relay client-information record
   

   # Configure VLAN-interface 100 to operate in DHCP relay mode.

   [Switch] interface vlan-interface 100
   [Switch-Vlan-interface100] dhcp select relay
   

   # Specify the IP address of the DHCP server.

   [Switch-Vlan-interface100] dhcp relay server-address 10.1.1.1
   [Switch-Vlan-interface100] quit
   

# Display dynamic IPv4SG bindings generated based on DHCP relay entries.

[Switch] display ip source binding dhcp-relay
Total entries found: 1
IP Address      MAC Address    Interface                VLAN Type
192.168.0.1     0001-0203-0406 Vlan100                  100  DHCP relay

VLAN-interface 100 will filter packets based on the IPSGv4 binding.