Method used to configure the USG firewall to release an IP address allocated by DHCP to the PC

39

On the USG2000, USG5000, and USG6000, you can release the IP address allocated by DHCP to the PC using the following commands:
Clear address 10.110.1.1
reset dhcp server ip-in-use ip 10.110.1.1
The commands can clear both expired and valid address binding information.

Other related questions:
Method used to configure the reserved IP address of DHCP on USG firewalls
On the USG2000, USG5000, and USG6000, you can configure the reserved IP address of DHCP as follows: 1. Run the system-view command to enter the system view. 2. Run the dhcp server forbidden-ip start-ip-address [ end-ip-address ] command to configure a reserved IP address. By default, except for the interface IP address of the DHCP server, all IP addresses in the DHCP address pool are used for automatic allocation. To reserve an IP address, set start-ip-address. For example, IP address 10.1.1.3 is used as the DNS server address and needs to be reserved. [USG] dhcp server forbidden-ip 10.1.1.3 To reserve an IP address segment, set start-ip-address and end-ip-address. Ensure that start-ip-address is not equal to or larger than end-ip-address and they are in the same network segment. For example, IP addresses from 10.1.1.4 to 10.1.1.9 are used as fixed IP addresses and need to be reserved. [USG] dhcp server forbidden-ip 10.1.1.4 10.1.1.9

Method used to configure the L2TP over IPSec user address segment on the USG2000 and USG5000
The method used to configure the L2TP over IPSec user address segment on the USG2000 and USG5000 is as follows: Configure the L2TP over IPSec user address segment using the CLI: # Define an address pool and allocate an IP address to the dial-up user. [LNS] aaa [LNS-aaa] ip pool 1 10.1.1.1 10.1.1.100 # Set the user name and password (consistent with those configured on the PC of the employee on a business trip). [LNS-aaa] local-user vpdnuser password cipher Hello123 [LNS-aaa] quit # Allocate an address in the IP address pool to the peer interface. [LNS] interface virtual-template 1 [LNS-Virtual-Template1] remote address pool 1 [LNS-Virtual-Template1] quit Configure the L2TP over IPSec user address segment using the web UI: Configure the L2TP parameters. 1. Choose Network > L2TP > L2TP. 2. In Configure L2TP, select Enable and click Apply. 3. In L2TP Group List, click New. 4. Set Group Type to LNS. 5. Configure the L2TP parameters. The server address shall be in the same network segment as the address in the address pool. In this way, you do not need to configure a route. Peer Tunnel Name must be consistent with Local Tunnel Name configured on the LAC. Group Type: LNS Peer Tunnel Name: LAC Tunnel Password Authentication: Enable Password Type: Ciphertext Tunnel password: Hello123 Confirm Tunnel password: Hello123 User Group: default Set the user address allocation parameters as follows: Server Address/Subnet Mask: 10.2.1.1/255.255.255.0 User Address Pool: 10.2.1.2-10.2.1.100 6. Click OK.

Commands used to release the IP lease of DHCP on USG firewalls
You can run the following commands to release the IP lease of DHCP on USG firewalls: The specific lease duration is configurable. To release the lease, you can configure the lease period to limitless. The configuration is as follows: [sysname] interface GigabitEthernet0/0/1 [sysname-GigabitEthernet0/0/1] ip address 10.1.1.1 255.255.255.0 [sysname-GigabitEthernet0/0/1] dhcp server expired unlimited

Method used to configure two IP addresses for an interface on the USG firewall and set the primary IP address as the dynamic IP address allocated by the DHCP gateway
You can configure two IP addresses for an interface on the USG2000, USG5000, and USG6000 and set the primary IP address as the dynamic IP address allocated by the DHCP gateway as follows: Note: The SUB address can only be configured as a static IP address of the PC. [USG]interface GigabitEthernet0/0/1 [USG-GigabitEthernet0/0/1]ip address 192.168.2.1 255.255.255.0 [USG-GigabitEthernet0/0/1]ip address 192.168.1.1 255.255.255.0 sub [USG-GigabitEthernet0/0/1]quit [USG] dhcp server ip-pool 0 [USG-dhcp-0]network 192.168.2.0 mask 255.255.255.0 [USG-dhcp-0]dns-list 192.168.2.3 [USG-dhcp-0] quit IP addresses in network segment 192.168.2.0 can be dynamically allocated. IP addresses in network segment 192.168.1.0 are static IP addresses set on the PC.

Method used to configure DHCP to bind an IP address and an MAC address on USG firewalls
On the USG2000, USG5000, and USG6000, you can configure DHCP to bind the IP address and the MAC address as follows: Configuration on the CLI: Configure address pool 3, and bind the IP address and the MAC address in this address pool. [USG] dhcp server ip-pool 3 [USG-dhcp-3] static-bind ip-address 10.1.1.5 mask 255.255.255.128 [USG-dhcp-3] static-bind mac-address 0021-97cf-2238 [USG-dhcp-3] quit Configuration on the web UI: Choose Network > DHCP Server > Service. Click New. In Advanced, configure a static binding in Static Address Binding.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top