Methods used to configure the excluded IP address on the AR

0

During network planning, some IP addresses in an address pool may be used by servers or other hosts, or some clients can be configured with specified IP addresses only because of special requirements. In this case, you need to exclude these IP addresses that cannot be automatically allocated from the address pool, preventing IP address conflicts.
Assume that IP addresses in the range of 10.10.10.11 to 10.10.10.20 cannot be dynamically allocated. The configuration on the AR is as follows:
- Interface address pool
[Huawei] dhcp enable
[Huawei] interface gigabitethernet 1/0/1 //Enter the view of the interface connected to the DHCP clients.
[Huawei-GigabitEthernet1/0/1] undo portswitch
[Huawei-GigabitEthernet1/0/1] ip address 10.10.10.10 24
[Huawei-GigabitEthernet1/0/1] dhcp select interface
[Huawei-GigabitEthernet1/0/1] dhcp server excluded-ip-address 10.10.10.11 10.10.10.20
- Global address pool
[Huawei] dhcp enable
[Huawei] interface gigabitethernet 1/0/1 //Enter the view of the interface connected to the DHCP clients.
[Huawei-GigabitEthernet1/0/1] undo portswitch
[Huawei-GigabitEthernet1/0/1] ip address 10.10.10.10 24
[Huawei-GigabitEthernet1/0/1] dhcp select global
[Huawei-GigabitEthernet1/0/1] quit
[Huawei] ip pool global1
[Huawei-ip-pool-global1] network 10.10.10.0 mask 24
[Huawei-ip-pool-global1] excluded-ip-address 10.10.10.11 10.10.10.20

Other related questions:
Method used to configure the reserved IP address of DHCP on USG firewalls
On the USG2000, USG5000, and USG6000, you can configure the reserved IP address of DHCP as follows: 1. Run the system-view command to enter the system view. 2. Run the dhcp server forbidden-ip start-ip-address [ end-ip-address ] command to configure a reserved IP address. By default, except for the interface IP address of the DHCP server, all IP addresses in the DHCP address pool are used for automatic allocation. To reserve an IP address, set start-ip-address. For example, IP address 10.1.1.3 is used as the DNS server address and needs to be reserved. [USG] dhcp server forbidden-ip 10.1.1.3 To reserve an IP address segment, set start-ip-address and end-ip-address. Ensure that start-ip-address is not equal to or larger than end-ip-address and they are in the same network segment. For example, IP addresses from 10.1.1.4 to 10.1.1.9 are used as fixed IP addresses and need to be reserved. [USG] dhcp server forbidden-ip 10.1.1.4 10.1.1.9

Error message is displayed when IP addresses are excluded on the AR
The troubleshooting roadmap and solution are as follows: 1. Check whether the dhcp select global command is configured on the VLANIF interface. This command can be used only after the address pool is configured. If the address pool has been configured, run the undo dhcp select global command to delete the configuration. 2. Check whether the range of the excluded IP addresses configured by the excluded-ip-address command is large, attempt to exclude one IP address, and check whether the fault persists. If the fault is rectified, the range of excluded IP addresses is large. Reduce the range. 3. Run the display ip pool command to check whether the IP address status is conflict, expired, or used. If the IP address status is conflict, expired, or used, reclaim the IP address and reconfigure the IP address that cannot be dynamically assigned. 4. Check whether the number of addresses in the address pool exceeds the specifications. You can check the device specification list. If the number of addresses in the address pool exceeds the specifications, delete the address pool and re-create an address pool. The device configuration is not performed through command lines. After vrpcfg.zip is exported, batch modify the configuration, and import the configuration to the flash memory. In this case, the system does not display an error message when the number of addresses in the address pool exceeds the specifications.

An error occurs when excluded-ip-address is executed
The solution to solving errors of IP addresses that cannot be dynamically assigned is as follows:
1. Check whether the dhcp select global command is configured on the VLANIF interface. This command can be used only after the address pool is configured. If the address pool has been configured, run the undo dhcp select global command to delete the configuration.
2. Check whether the range of IP addresses that cannot be dynamically assigned is large, attempt to exclude one IP address and check whether the fault persists. If the fault is rectified, the range of IP addresses that cannot be dynamically assigned is large. Reduce the range.
3. Run the display ip pool command to check whether the IP address status is conflict, expired, or used. If the IP address status is conflict, expired, or used, reclaim the IP address and reconfigure the IP address that cannot be dynamically assigned.
4. Check whether the number of addresses in the address pool exceeds the specifications. You can check the device specification list. If the number of addresses in the address pool exceeds the specifications, delete the address pool and re-create a new address pool.
The device configuration is not performed through command lines. After vrpcfg.zip is exported, batch modify the configuration, and import the configuration to the flash memory. In this case, the system does not display an error message when the number of addresses in the address pool exceeds the specifications.

How do I check IP addresses that are dynamically obtained by an AR
On the AR, you can run the following command to check the IP address that is dynamically obtained. - If IP addresses are assigned based on the interface address pool, run the display ip pool interface interface-pool-name used command. If the IP addresses are assigned based on the global address pool, run the display ip pool name ip-pool-name used command. You can know the IP address assigned to each client based on the mapping between IP addresses and MAC addresses.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top