FoxGate S63 series, Руководство по настройке

Страница: 298 / 565

DHCPv6 option37, 38
297
Fig 34-1 DHCPv6 Snooping option schematic
As is shown in the figure above, Mac-AA, Mac-BB and Mac-CC are normal users,
connected to untrusted interface 1/0/2, 1/0/3 and 1/0/4 respectively, and they get IP
2010:2, 2010:3 and 2010:4 through DHCPv6 Client; DHCPv6 Server is connected to the
trusted interface 1/0/1. Configure three address assignment policies (CLASS), of which
CLASS1 matches option 38, CLASS2 matches option 37 and CLASS3 matches option
37 and option 38. In the address pool EastDormPool, the requests matched with
CLASS1, CLASS2 and CLASS3 will be assigned an address ranging from
2001:da8:100:1::2 to 2001:da8:100:1::30, from 2001:da8:100:1::31 to
2001:da8:100:1::60 and from 2001:da8:100:1::61 to2001:da8:100:1::100 respectively;
DHCPv6 snooping function is enabled and option 37 and option 38 are configured in
Switch A.
Switch A configuration:
SwitchA(config)#ipv6 dhcp snooping remote-id option
SwitchA(config)#ipv6 dhcp snooping subscriber-id option
SwitchA(config)#int e 1/0/1
SwitchA(config-if-ethernet1/0/1)#ipv6 dhcp snooping trust
SwitchA(config-if-ethernet1/0/1)#exit
SwitchA(config)#interface vlan 1
SwitchA(config-if-vlan1)#ipv6 address 2001:da8:100:1::1
SwitchA(config-if-vlan1)#exit
SwitchA(config)#interface ethernet 1/0/1-4
SwitchA(config-if-port-range)#switchport access vlan 1
Interface E1/0/1
MAC-CC MAC-BB MAC-AA
Switch B
Switch A
Interface E1/0/4 Interface E1/0/3 Interface
E1/0/2