Can DHCP snooping be implemented on an AR with no LAN card

9

DHCP snooping can only be provided by the LAN card.
To limit source MAC addresses without a LAN card installed, the AR can use a Layer 2 ACL. However, Layer 2 ACL is not a replacement for DHCP snooping.

Other related questions:
Can the DHCP snooping function be implemented if a router does not have a LAN card
The DHCP snooping function can be implemented on the LAN card only. To set limits to source MAC address, create a Layer 2 ACL which cannot substitute the DHCP snooping function.

Can a router provide DHCP snooping function without using a LAN card
No, DHCP snooping function can only be provided by the LAN card. To restrict source MAC addresses without a LAN card installed, the router can use Layer 2 ACL. However, Layer 2 ACL is not a replacement for DHCP snooping.

Whether DHCP can be configured on the intranet LAN interface of the AR
The DHCP server can be configured on a Layer 3 interface of the Huawei AR to allocate IP addresses to users connected to the Layer 3 interface. In practice, an interface connected to the intranet is enabled with the DHCP server and allocates intranet IP addresses to intranet users. The interface connected to the public network has NAT enabled to communicate with the public network.

How do I configure an Ethernet sub-interface to implement inter-VLAN communication
Generally, only one primary IP address can be configured for a physical interface. When a Layer 3 device connects to a Layer 2 network device through a Layer 3 Ethernet interface and interfaces on the Layer 2 network device are assigned to different VLANs, one primary IP address of the Layer 3 physical interface cannot implement inter-VLAN communication. You can configure secondary IP addresses or sub-interfaces for the Layer 3 Ethernet interface to solve this problem. The secondary IP addresses depend on the primary IP address. When the primary IP address becomes invalid, the secondary IP addresses also become invalid. The sub-interfaces and main interface are independent. Sub-interfaces share physical layer parameters of their main interface, and are configured with their respective link layer parameters and network layer parameters. The IP address of the main interface and IP addresses of sub-interfaces are independent. You can create sub-interfaces on the Ethernet interface connecting the Layer 3 device to the Layer 2 device so that users in different VLANs can communicate.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top