SNR S2940-8G-v2, Руководство по настройке

Страница: 248 / 420

SNR S2940-8G-v2 Switch Configuration Guide
DHCPv6 option37, 38
address range <start-ip> <end-
ip>
no address range <start-ip>
<end-ip> This command is used to set address range for a DHCPv6
class in DHCPv6 address pool configuration mode, the no
command is used to remove the addreass range. The pre-
fix/plen form is not supported.
38.3 DHCPv6 option37, 38 Examples
38.3.1 DHCPv6 Snooping option37, 38 Example
Switch A
MAC-CC
Switch B
MAC-AA MAC-BB
E1/0/1
E1/0/2
E1/0/3
E1/0/4
Figure 38.1: DHCPv6 Snooping option schematic
As is shown in the figure above, Mac-AA, Mac-BB and Mac-CC are normal users, connected
to untrusted interface 1/0/2, 1/0/3 and 1/0/4 respectively, and they get IP
2010:2
,
2010:3
and
2010:4
through DHCPv6 Client; DHCPv6 Server is connected to the trusted interface 1/0/1. Con-
figure three address assignment policies (CLASS), of which CLASS1 matches option 38, CLASS2
matches option 37 and CLASS3 matches option 37 and option 38. In the address pool EDP, the
requests matched with CLASS1, CLASS2 and CLASS3 will be assigned an address ranging from
2001:da8:100:1::2
to
2001:da8:100:1::30
, from
2001:da8:100:1::31
to
2001:da8:100:1::60
and from
2001:da8:100:1::61
to
2001:da8:100:1::100
respectively; DHCPv6 snooping function
is enabled and option 37 and option 38 are configured in Switch A.
Switch A configuration:
SwitchA(config)#ipv6 dhcp snooping remote-id option
SwitchA(config)#ipv6 dhcp snooping subscriber-id option
SwitchA(config)#int e 1/0/1
SwitchA(config-if-ethernet1/0/1)#ipv6 dhcp snooping trust
SwitchA(config-if-ethernet1/0/1)#exit
SwitchA(config)#interface vlan 1
SwitchA(config-if-vlan1)#ipv6 address 2001:da8:100:1::1
SwitchA(config-if-vlan1)#exit
SwitchA(config)#interface ethernet 1/0/1-4
SwitchA(config-if-port-range)#switchport access vlan 1
SwitchA(config-if-port-range)#exit
SwitchA(config)#
248