17-DHCP快速配置指南
本章節下載 (408.47 KB)
DHCP快速配置指南
Copyright © 2024 bobty下载软件 版權所有,保留一切權利。
非經本公司書麵許可,任何單位和個人不得擅自摘抄、複製本文檔內容的部分或全部,並不得以任何形式傳播。
除bobty下载软件 的商標外,本手冊中出現的其它公司的商標、產品標識及商品名稱,由各自權利人擁有。
本文檔中的信息可能變動,恕不另行通知。
目 錄
本案例介紹配置接口工作在DHCP服務器模式,實現動態分配IPv4地址的方法。
如1.2 圖1所示,公司將交換機做為核心交換機,現在需要在核心交換機上劃分3個VLAN網段,HostA、Host B和Host C分別屬於VLAN 5、VLAN 6和VLAN 7,要求在交換機上配置DHCP服務器功能,分別給主機分配不同網段的IP地址。
· 作為DHCP服務器的Switch為網段192.168.5.0/24、192.168.6.0/24和192.168.7.0/24中的客戶端動態分配IP地址;
· Switch的三個VLAN接口,VLAN接口5、VLAN接口6和VLAN接口7的地址分別為192.168.5.254/24、192.168.6.254/24和192.168.7.254/24;
· 192.168.5.0/24網段內的DNS服務器地址為192.168.5.100/24,網關的地址為192.168.5.254/24;
· 192.168.6.0/24網段內的DNS服務器地址為192.168.6.100/24,網關的地址為192.168.6.254/24;
· 192.168.7.0/24網段內的DNS服務器地址為192.168.7.100/24,網關的地址為192.168.7.254/24。
圖1 DHCP服務器配置組網圖
# 配置端口所屬VLAN和對應VLAN接口的IP地址,IP地址即是對應VLAN的網關地址。
<Switch> system-view
[Switch] vlan 5
[Switch-vlan5] port gigabitEthernet 1/0/5
[Switch-vlan5] quit
[Switch]vlan 6
[Switch-vlan6] port gigabitEthernet 1/0/6
[Switch-vlan6] quit
[Switch]vlan 7
[Switch-vlan7] port gigabitEthernet 1/0/7
[Switch-vlan7] quit
[Switch] interface vlan-interface 5
[Switch-Vlan-interface5] ip address 192.168.5.254 255.255.255.0
[Switch-Vlan-interface5] quit
[Switch]interface vlan-interface 6
[Switch-Vlan-interface6] ip address 192.168.6.254 255.255.255.0
[Switch-Vlan-interface6] quit
[Switch]interface vlan-interface 7
[Switch-Vlan-interface7] ip address 192.168.7.254 255.255.255.0
[Switch-Vlan-interface7] quit
# 配置不參與自動分配的IP地址(DNS服務器等,此步為選配)
[Switch] dhcp server forbidden-ip 192.168.5.100
[Switch] dhcp server forbidden-ip 192.168.6.100
[Switch] dhcp server forbidden-ip 192.168.7.100
# 配置DHCP地址池5,用來為192.168.5.0/24網段內的客戶端分配IP地址。
[Switch] dhcp server ip-pool 5
[Switch-dhcp-pool-5] network 192.168.5.0 mask 255.255.255.0
[Switch-dhcp-pool-5] dns-list 192.168.5.100
[Switch-dhcp-pool-5] gateway-list 192.168.5.254
[Switch-dhcp-pool-5] quit
# 配置DHCP地址池6,用來為192.168.6.0/24網段內的客戶端分配IP地址。
[Switch] dhcp server ip-pool 6
[Switch-dhcp-pool-6] network 192.168.6.0 mask 255.255.255.0
[Switch-dhcp-pool-6] dns-list 192.168.6.100
[Switch-dhcp-pool-6] gateway-list 192.168.6.254
[Switch-dhcp-pool-6] quit
# 配置DHCP地址池7,用來為192.168.7.0/24網段內的客戶端分配IP地址。
[Switch] dhcp server ip-pool 7
[Switch-dhcp-pool-7] network 192.168.7.0 mask 255.255.255.0
[Switch-dhcp-pool-7] dns-list 192.168.7.100
[Switch-dhcp-pool-7] gateway-list 192.168.7.254
[Switch-dhcp-pool-7] quit
# 開啟DHCP服務
[Switch] dhcp enable
# 配置VLAN接口5、6和7工作在DHCP服務器模式。
[Switch] interface vlan-interface 5
[Switch-Vlan-interface5] dhcp select server
[Switch-Vlan-interface5] quit
[Switch] interface vlan-interface 6
[Switch-Vlan-interface6] dhcp select server
[Switch-Vlan-interface6] quit
[Switch] interface vlan-interface 7
[Switch-Vlan-interface7] dhcp select server
[Switch-Vlan-interface7] quit
配置完成後,5、6、7三個網段客戶端可以從DHCP服務器申請到相應網段的IP地址和網絡配置參數。
# 顯示DHCP地址池的信息。
[Switch] display dhcp server pool
Pool name: 5
Network: 192.168.5.0 mask 255.255.255.0
dns-list 192.168.5.100
expired day 1 hour 0 minute 0 second 0
gateway-list 192.168.5.254
IP-in-use threshold 100
Pool name: 6
Network: 192.168.6.0 mask 255.255.255.0
dns-list 192.168.6.100
expired day 1 hour 0 minute 0 second 0
gateway-list 192.168.6.254
IP-in-use threshold 100
Pool name: 7
Network: 192.168.7.0 mask 255.255.255.0
dns-list 192.168.7.100
expired day 1 hour 0 minute 0 second 0
gateway-list 192.168.7.254
IP-in-use threshold 100
# 顯示DHCP地址綁定信息。在顯示信息裏可以查看DHCP服務器為客戶端分配的IP地址。
[Switch] display dhcp server ip-in-use
IP address Client-identifier/ Lease expiration Type
Hardware address
192.168.5.1 0262-1d36-1802-00 Feb 18 10:41:21 2023 Auto(C)
3264-2e30-3130-322d-
566c-616e-3130
192.168.6.1 0262-1d3b-7403-00 Feb 18 10:41:17 2023 Auto(C)
192.168.7.2 0262-1d41-8304-00 Feb 18 10:41:41 2023 Auto(C)
# 顯示DHCP地址池的空閑地址信息。
[Switch] display dhcp server free-ip
Pool name: 5
Network: 192.168.5.0 mask 255.255.255.0
IP ranges from 192.168.5.2 to 192.168.5.99
IP ranges from 192.168.5.101 to 192.168.5.254
Pool name: 6
Network: 192.168.6.0 mask 255.255.255.0
IP ranges from 192.168.6.2 to 192.168.6.99
IP ranges from 192.168.6.101 to 192.168.6.254
Pool name: 7
Network: 192.168.7.0 mask 255.255.255.0
IP ranges from 192.168.7.2 to 192.168.7.99
IP ranges from 192.168.7.101 to 192.168.7.254
# 顯示租約過期的地址綁定信息。當分配的IP地址的租約超過有效期限後,執行本命令可以查看到租約過期的地址綁定信息(通過expired命令可以配置租約有效期,缺省有效期限為1天)。
[Switch] display dhcp server expired
IP address Client-identifier/Hardware address Lease expiration
192.168.7.1 0262-1d36-2703-00 Feb 17 10:53:52 2023
# 清除DHCP的正式綁定和臨時綁定信息。請在用戶視圖下執行本命令。
[Switch] quit
<Switch> reset dhcp server ip-in-use
# 顯示DHCP地址綁定信息。此時設備上不存在相關信息。
<Switch> display dhcp server ip-in-use
IP address Client-identifier/ Lease expiration Type
Hardware address
# 清除租約過期的地址綁定信息。請在用戶視圖下執行本命令。
<Switch> reset dhcp server expired
# 顯示租約過期的地址綁定信息。此時設備上不存在相關信息。
<Switch> display dhcp server ip-in-use
IP address Client-identifier/ Lease expiration Type
Hardware address
# 顯示DHCP服務器的統計信息。
<Switch> dis dhcp server statistics
Pool number: 3
Pool utilization: 0.00%
Bindings:
Automatic: 0
Manual: 0
Expired: 3
Conflict: 0
Messages received: 170
DHCPDISCOVER: 57
DHCPREQUEST: 57
DHCPDECLINE: 0
DHCPRELEASE: 56
DHCPINFORM: 0
BOOTPREQUEST: 0
Messages sent: 114
DHCPOFFER: 57
DHCPACK: 57
DHCPNAK: 0
BOOTPREPLY: 0
Bad Messages: 0
# 清除DHCP服務器的統計信息。請在用戶視圖下執行本命令。
<Switch> reset dhcp server statistics
# 清除DHCP服務器的統計信息後,設備上不存在相關統計信息。
<Switch> dis dhcp server statistics
Pool number: 3
Pool utilization: 0.39%
Bindings:
Automatic: 3
Manual: 0
Expired: 0
Conflict: 0
Messages received: 0
DHCPDISCOVER: 0
DHCPREQUEST: 0
DHCPDECLINE: 0
DHCPRELEASE: 0
DHCPINFORM: 0
BOOTPREQUEST: 0
Messages sent: 0
DHCPOFFER: 0
DHCPACK: 0
DHCPNAK: 0
BOOTPREPLY: 0
Bad Messages: 0
· Switch:
#
dhcp enable
dhcp server forbidden-ip 192.168.5.100
dhcp server forbidden-ip 192.168.6.100
dhcp server forbidden-ip 192.168.7.100
#
vlan 5 to 7
#
dhcp server ip-pool 5
gateway-list 192.168.5.254
network 192.168.5.0 mask 255.255.255.0
dns-list 192.168.5.100
#
dhcp server ip-pool 6
gateway-list 192.168.6.254
network 192.168.6.0 mask 255.255.255.0
dns-list 192.168.6.100
#
dhcp server ip-pool 7
gateway-list 192.168.7.254
network 192.168.7.0 mask 255.255.255.0
dns-list 192.168.7.100
#
interface Vlan-interface5
ip address 192.168.5.254 255.255.255.0
dhcp select server
#
interface Vlan-interface6
ip address 192.168.6.254 255.255.255.0
dhcp select server
#
interface Vlan-interface7
ip address 192.168.7.254 255.255.255.0
dhcp select server
#
interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 5
#
interface GigabitEthernet1/0/6
port link-mode bridge
port access vlan 6
#
interface GigabitEthernet1/0/7
port link-mode bridge
port access vlan 7
#
· 產品配套“三層技術-IP業務配置指導”中的“DHCP”。
· 產品配套“三層技術-IP業務命令參考”中的“DHCP”。
本案例介紹配置接口工作在DHCP中繼模式,當DHCP客戶端和DHCP服務器處於不同物理網段時,用於實現客戶端可以通過DHCP中繼與DHCP服務器通信,獲取IP地址及其他配置信息。
· DHCP客戶端所在網段為10.10.1.0/24,DHCP服務器的IP地址為10.1.1.1/24;
· 由於DHCP客戶端和DHCP服務器不在同一網段,因此,需要在客戶端所在網段設置DHCP中繼設備,以便客戶端可以從DHCP服務器申請到10.10.1.0/24網段的IP地址及相關配置信息;
· Switch A作為DHCP中繼通過端口(屬於VLAN10)連接到DHCP客戶端所在的網絡,交換機VLAN接口10的IP地址為10.10.1.1/24,VLAN接口20的IP地址為10.1.1.2/24。
圖2 DHCP中繼配置組網圖
· 配置DHCP服務器Switch B
# 創建VLAN接口和IP地址。
<SwitchB> system-view
[SwitchB] vlan 20
[SwitchB-vlan20] port gigabitEthernet 1/0/1
[SwitchB-vlan20] quit
[SwitchB] interface vlan-interface 20
[SwitchB-Vlan-interface20] ip address 10.1.1.1 255.255.255.0
[SwitchB-Vlan-interface20] quit
# 配置DHCP地址池5,用來為10.10.1.0/24網段內的客戶端分配IP地址。
[SwitchB] dhcp server ip-pool 5
[SwitchB-dhcp-pool-5] network 10.10.1.0 mask 255.255.255.0
[SwitchB-dhcp-pool-5] dns-list 10.10.1.100
[SwitchB-dhcp-pool-5] gateway-list 10.10.1.1
[SwitchB-dhcp-pool-5] quit
# 配置和DHCP客戶端互通的靜態路由。
[SwitchB] ip route-static 10.10.1.0 24 10.1.1.2
# 開啟DHCP服務
[SwitchB] dhcp enable
# 配置VLAN接口20工作在DHCP服務器模式。
[SwitchB] interface vlan-interface 20
[SwitchB-Vlan-interface20] dhcp select server
[SwitchB-Vlan-interface20] quit
· 配置DHCP中繼設備Switch A
# 創建VLAN接口和IP地址。
<SwitchA> system-view
[SwitchA] vlan 10
[SwitchA-vlan10] port gigabitEthernet 1/0/1
[SwitchA-vlan10] quit
[SwitchA] vlan 20
[SwitchA-vlan20] port gigabitEthernet 1/0/2
[SwitchA-vlan20] quit
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] ip address 10.10.1.1 255.255.255.0
[SwitchA-Vlan-interface10] quit
[SwitchA] interface vlan-interface 20
[SwitchA-Vlan-interface20] ip address 10.1.1.2 255.255.255.0
[SwitchA-Vlan-interface20] quit
# 開啟DHCP服務。
[SwitchA] dhcp enable
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] dhcp select relay
# 配置DHCP服務器的地址。
[SwitchA-Vlan-interface10] dhcp relay server-address 10.1.1.1
配置完成後,DHCP客戶端可以通過DHCP中繼從DHCP服務器獲取IP地址及相關配置信息。
# 顯示接口上指定的DHCP服務器地址信息。
[SwitchA] display dhcp relay server-address
Interface name Server IP address Public/VRF name Class name
Vlan10 10.1.1.1 Y/-- --
# 顯示DHCP地址綁定信息。在顯示信息裏可以查看DHCP服務器為客戶端分配的IP地址。
[SwitchB] display dhcp server ip-in-use
IP address Client-identifier/ Lease expiration Type
Hardware address
10.10.1.2 0036-3232-352e-3261- Feb 18 16:14:25 2023 Auto(C)
3264-2e30-3130-322d-
566c-616e-3130
# 顯示DHCP中繼的相關報文統計信息。
[SwitchB] display dhcp relay statistics
DHCP packets dropped: 0
Incorrect Message type: 0
Option Parsing failed: 0
Mac-check failed: 0
Other count: 0
DHCP packets received from clients: 2
DHCPDISCOVER: 1
DHCPREQUEST: 1
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets received from servers: 2
DHCPOFFER: 1
DHCPACK: 1
DHCPNAK: 0
BOOTPREPLY: 0
DHCP packets relayed to servers: 2
DHCPDISCOVER: 1
DHCPREQUEST: 1
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets relayed to clients: 2
DHCPOFFER: 1
DHCPACK: 1
DHCPNAK: 0
BOOTPREPLY: 0
DHCP packets sent to servers: 0
DHCPDISCOVER: 0
DHCPREQUEST: 0
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets sent to clients: 0
DHCPOFFER: 0
DHCPACK: 0
DHCPNAK: 0
BOOTPREPLY: 0
# 在用戶視圖下執行reset dhcp relay statistics命令,可以清除該統計信息。
[SwitchB] quit
<SwitchB> reset dhcp relay statistics
# 再次查看顯示DHCP中繼的相關報文統計信息。
[SwitchB] display dhcp relay statistics
DHCP packets dropped: 0
Incorrect Message type: 0
Option Parsing failed: 0
Mac-check failed: 0
Other count: 0
DHCP packets received from clients: 0
DHCPDISCOVER: 0
DHCPREQUEST: 0
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets received from servers: 0
DHCPOFFER: 0
DHCPACK: 0
DHCPNAK: 0
BOOTPREPLY: 0
DHCP packets relayed to servers: 0
DHCPDISCOVER: 0
DHCPREQUEST: 0
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets relayed to clients: 0
DHCPOFFER: 0
DHCPACK: 0
DHCPNAK: 0
BOOTPREPLY: 0
DHCP packets sent to servers: 0
DHCPDISCOVER: 0
DHCPREQUEST: 0
DHCPINFORM: 0
DHCPRELEASE: 0
DHCPDECLINE: 0
BOOTPREQUEST: 0
DHCP packets sent to clients: 0
DHCPOFFER: 0
DHCPACK: 0
DHCPNAK: 0
BOOTPREPLY: 0
· 配置Switch B
#
dhcp enable
#
vlan 20
#
dhcp server ip-pool 5
gateway-list 10.10.1.1
network 10.10.1.0 mask 255.255.255.0
dns-list 10.10.1.100
#
interface Vlan-interface20
ip address 10.1.1.1 255.255.255.0
dhcp select server
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 20
#
ip route-static 10.10.1.0 24 10.1.1.2
#
· 配置Switch A
#
dhcp enable
#
vlan 10
#
vlan 20
#
interface Vlan-interface10
ip address 10.10.1.1 255.255.255.0
dhcp select relay
dhcp relay server-address 10.1.1.1
#
interface Vlan-interface20
ip address 10.1.1.2 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 20
#
· 產品配套“三層技術-IP業務配置指導”中的“DHCP”。
· 產品配套“三層技術-IP業務命令參考”中的“DHCP”。
本案例介紹配置DHCP Snooping功能的配置方法。
如3.2 圖3所示,Switch通過以太網端口GigabitEthernet1/0/1連接到合法DHCP服務器,通過以太網端口GigabitEthernet1/0/3連接到非法DHCP服務器,通過GigabitEthernet1/0/2連接到DHCP客戶端。要求:
· 與合法DHCP服務器相連的端口可以轉發DHCP服務器的響應報文,而其他端口不轉發DHCP服務器的響應報文。
· 記錄DHCP-REQUEST報文和信任端口收到的DHCP-ACK報文中DHCP客戶端IP地址及MAC地址的綁定信息。
圖3 DHCP Snooping配置組網圖
# 全局開啟DHCP Snooping功能。
<Switch> system-view
[Switch] dhcp snooping enable
# 設置GigabitEthernet1/0/1端口為信任端口。
[Switch] interface gigabitethernet 1/0/1
[Switch-GigabitEthernet1/0/1] dhcp snooping trust
[Switch-GigabitEthernet1/0/1] quit
# 在GigabitEthernet1/0/2上開啟DHCP Snooping表項功能。
[Switch] interface gigabitethernet 1/0/2
[Switch-GigabitEthernet1/0/2] dhcp snooping binding record
[Switch-GigabitEthernet1/0/2] quit
配置完成後,DHCP客戶端隻能從合法DHCP服務器獲取IP地址和其它配置信息,非法DHCP服務器無法為DHCP客戶端分配IP地址和其他配置信息。且使用display dhcp snooping binding可查詢到獲取到的DHCP Snooping表項。在用戶視圖下執行reset dhcp snooping binding命令,可以清除DHCP Snooping表項。
#
dhcp snooping enable
#
interface GigabitEthernet1/0/1
port link-mode bridge
dhcp snooping trust
#
interface GigabitEthernet1/0/2
port link-mode bridge
dhcp snooping binding record
#
· 產品配套“三層技術-IP業務配置指導”中的“DHCP”。
· 產品配套“三層技術-IP業務命令參考”中的“DHCP”。
本案例介紹配置接口工作在DHCPv6服務器模式,實現動態分配IPv6地址的方法。
如圖4所示,交換機作為企業網絡內部的網關設備。配置交換機接口工作在DHCPv6服務器模式,並配置地址/前綴分配方式,從而為主機Host A和Host B自動分配IPv6地址。不同網段的主機通過IPv6靜態路由互相訪問。
· Host A、Host B、Switch A和Switch B之間通過以太網端口相連,將以太網端口分別加入相應的VLAN裏,在VLAN接口上配置IPv6地址,驗證它們之間的互通性。
· 配置VLAN接口工作在DHCPv6服務器模式,並引用地址池,從而為主機自動分配IPv6地址。
· 在Switch A和Switch B上配置IPv6靜態路由,實現各網段的互通。
圖4 動態分配IPv6地址組網圖
# 創建VLAN,在VLAN中加入對應的端口。
<SwitchA> system-view
[SwitchA] vlan 3
[SwitchA-vlan3] port gigabitethernet 1/0/2
[SwitchA-vlan3] quit
[SwitchA] vlan 2
[SwitchA-vlan2] port gigabitethernet 1/0/1
[SwitchA-vlan2] quit
# 手工指定VLAN接口2的全球單播地址。
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ipv6 address 3001::1/64
[SwitchA-Vlan-interface2] quit
# 手工指定VLAN接口3的全球單播地址,並允許其發布RA消息。
[SwitchA] interface vlan-interface 3
[SwitchA-Vlan-interface3] ipv6 address 2001::1/64
[SwitchA-Vlan-interface3] undo ipv6 nd ra halt
# 配置VLAN接口3引用DHCP地址池。
[SwitchA-Vlan-interface3] ipv6 dhcp server apply pool 1 allow-hint rapid-commit
# 配置被管理地址的配置標誌位為1,即主機通過DHCPv6服務器獲取IPv6地址。配置其他信息配置標誌位為1,即主機通過DHCPv6服務器獲取除IPv6地址以外的其他信息。
[SwitchA-Vlan-interface3] ipv6 nd autoconfig managed-address-flag
[SwitchA-Vlan-interface3] ipv6 nd autoconfig other-flag
# 配置接口VLAN接口3工作在DHCPv6服務器模式。
[SwitchA-Vlan-interface3] ipv6 dhcp select server
[SwitchA-Vlan-interface3] quit
# 配置DHCPv6地址池1。
[SwitchA] ipv6 dhcp pool 1
[SwitchA-dhcp6-pool-1] network 2001::/64
[SwitchA-dhcp6-pool-1] dns-server 1::1
[SwitchA-dhcp6-pool-1] quit
# 配置IPv6靜態路由,該路由的目的地址為4001::/64,下一跳地址為3001::2。
[SwitchA] ipv6 route-static 4001:: 64 3001::2
# 保存配置。
[SwitchA] save force
# 創建VLAN,在VLAN中加入對應的端口。
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-vlan2] port gigabitethernet 1/0/1
[SwitchB-vlan2] quit
[SwitchB] vlan 3
[SwitchB-vlan3] port gigabitethernet 1/0/2
[SwitchB-vlan3] quit
# 手工指定VLAN接口2的全球單播地址。
[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ipv6 address 3001::2/64
[SwitchB-Vlan-interface2] quit
# 手工指定VLAN接口3的全球單播地址,並允許其發布RA消息。
[SwitchB] interface vlan-interface 3
[SwitchB-Vlan-interface3] ipv6 address 4001::1/64
[SwitchB-Vlan-interface3] undo ipv6 nd ra halt
# 配置VLAN接口3引用DHCP地址池。
[SwitchB-Vlan-interface3] ipv6 dhcp server apply pool 1 allow-hint rapid-commit
# 配置被管理地址的配置標誌位為1,即主機通過DHCPv6服務器獲取IPv6地址。配置其他信息配置標誌位為1,即主機通過DHCPv6服務器獲取除IPv6地址以外的其他信息。
[SwitchB-Vlan-interface3] ipv6 nd autoconfig managed-address-flag
[SwitchB-Vlan-interface3] ipv6 nd autoconfig other-flag
# 配置接口VLAN接口3工作在DHCPv6服務器模式。
[SwitchB-Vlan-interface3] ipv6 dhcp select server
[SwitchB-Vlan-interface3] quit
# 配置DHCPv6地址池1。
[SwitchB] ipv6 dhcp pool 1
[SwitchB-dhcp6-pool-1] network 4001::/64
[SwitchB-dhcp6-pool-1] dns-server 1::1
[SwitchB-dhcp6-pool-1] quit
# 配置IPv6靜態路由,該路由的目的地址為2001::/64,下一跳地址為3001::1。
[SwitchB] ipv6 route-static 2001:: 64 3001::1
# 保存配置。
[SwitchB] save force
在Host A上安裝IPv6,並配置自動獲取IPv6地址。
在Host B上安裝IPv6,並配置自動獲取IPv6地址。
# 顯示DHCPv6地址池的信息。
[SwitchA] display ipv6 dhcp server ip-in-use
DHCPv6 pool: 1
Network: 2001::/64
Preferred lifetime 604800 seconds, valid lifetime 2592000 seconds
DNS server addresses:
1::1
IP-in-use threshold: 100
PD-in-use threshold: 100
# 顯示接口上的DHCPv6服務器信息。
[SwitchA] displsy ipv6 dhcp server
Interface Pool
Vlan-interface3 1
# 在Switch A上查看DHCPv6服務器為客戶端分配的IPv6地址。
[SwitchA] display ipv6 dhcp server ip-in-use
Pool: 1
IPv6 address Type Lease expiration
2001::2 Auto(C) Sep 30 11:45:07 2021
# 從Switch A上查看端口GigabitEthernet1/0/2的鄰居信息。
[SwitchA] display ipv6 neighbors interface gigabitethernet 1/0/2
Type: S-Static D-Dynamic O-Openflow R-Rule IS-Invalid static
IPv6 address MAC address VLAN/VSI Interface State T Aging
2001::2 b025-0b54-0106 -- GE1/0/2 REACH D 29
FE80::B225:BFF:FE54:106 b025-0b54-0106 -- GE1/0/2 REACH D 18
通過上麵的信息可以知道Host A上獲得的IPv6全球單播地址為2001::2。
# 顯示租約過期的DHCPv6地址綁定信息。
[SwitchA] display ipv6 dhcp server expired
IPv6 address DUID Lease expiration
2001::3 0262-9ead-ab03-00 Feb 17 17:09:02 2023
# 清除DHCPv6的正式地址綁定和臨時地址綁定信息。並再次查看DHCPv6服務器為客戶端分配的IPv6地址
[SwitchA] quit
<SwitchA> reset ipv6 dhcp server ip-in-use
<SwitchA> display ipv6 dhcp server ip-in-use
# 清除租約過期的DHCPv6地址綁定信息。並再次查看租約過期的DHCPv6地址綁定信息
<SwitchA> reset ipv6 dhcp server expired
<SwitchA> display ipv6 dhcp server expired
IPv6 address DUID Lease expiration
# 顯示DHCPv6服務器的報文統計信息。
<SwitchA> display ipv6 dhcp server statistics
Bindings:
Ip-in-use : 0
Pd-in-use : 0
Expired : 1
Conflict : 1
Packets received : 24
Solicit : 8
Request : 8
Confirm : 0
Renew : 0
Rebind : 0
Release : 8
Decline : 0
Information-request : 0
Relay-forward : 0
Packets dropped : 0
Packets sent : 24
Advertise : 8
Reconfigure : 0
Reply : 16
Relay-reply : 0
# 在用戶視圖下執行reset ipv6 dhcp server statistics命令,可以清除該統計信息。
<SwitchA> reset ipv6 dhcp server statistics
<SwitchA> display ipv6 dhcp server statistics
Bindings:
Ip-in-use : 0
Pd-in-use : 0
Expired : 1
Conflict : 1
Packets received : 0
Solicit : 0
Request : 0
Confirm : 0
Renew : 0
Rebind : 0
Release : 0
Decline : 0
Information-request : 0
Relay-forward : 0
Packets dropped : 0
Packets sent : 0
Advertise : 0
Reconfigure : 0
Reply : 0
Relay-reply : 0
# 在Switch B上查看DHCPv6服務器為客戶端分配的IPv6地址
[SwitchB] display ipv6 dhcp server ip-in-use
Pool: 1
IPv6 address Type Lease expiration
4001::2 Auto(C) Sep 30 14:05:49 2021
# 從Switch B上查看端口GigabitEthernet1/0/2的鄰居信息。
[SwitchB] display ipv6 neighbors interface gigabitethernet 1/0/2
Type: S-Static D-Dynamic O-Openflow R-Rule IS-Invalid static
IPv6 address MAC address VLAN/VSI Interface State T Aging
4001::2 b043-5415-0406 -- GE1/0/2 REACH D 3
FE80::B243:54FF:FE15:406 b043-5415-0406 -- GE1/0/2 REACH D 44
通過上麵的信息可以知道Host B上獲得的IPv6全球單播地址為4001::2。
從Host A上也可以ping通Host B,證明它們是互通的。
· Switch A:
#
vlan 2 to 3
#
ipv6 dhcp pool 1
network 2001::/64
dns-server 1::1
#
interface Vlan-interface3
ipv6 dhcp select server
ipv6 dhcp server apply pool 1 allow-hint rapid-commit
ipv6 address 2001::1/64
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
#
interface Vlan-interface2
ipv6 address 3001::1/64
#
interface GigabitEthernet1/0/1
port link-mode bridge
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 3
#
ipv6 route-static 4001:: 64 3001::2
#
· Switch B :
#
vlan 2 to 3
#
ipv6 dhcp pool 1
network 4001::/64
dns-server 1::1
#
interface Vlan-interface2
ipv6 address 3001::2/64
#
interface Vlan-interface3
ipv6 dhcp select server
ipv6 dhcp server apply pool 1 allow-hint rapid-commit
ipv6 address 4001::1/64
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 3
#
ipv6 route-static 2001:: 64 3001::1
#
· 產品配套“三層技術-IP業務配置指導”中的“DHCPv6”。
· 產品配套“三層技術-IP業務命令參考”中的“DHCPv6”
不同款型規格的資料略有差異, 詳細信息請向具體銷售和400谘詢。H3C保留在沒有任何通知或提示的情況下對資料內容進行修改的權利!