Got it

dhcp and option82 configuration

Created: Oct 6, 2020 09:42:37Latest reply: Oct 14, 2020 19:50:42 547 8 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi there!


I faced a strange switch bahaviour and can not resolve this problem on my own.


So i have a switch : 

[HUAWEI]display version 

Huawei Versatile Routing Platform Software

VRP (R) software, Version 5.170 (S5335 V200R019C00SPC500)

Copyright (C) 2000-2019 HUAWEI TECH Co., Ltd.

HUAWEI S5335-L32ST4X-A Routing Switch uptime is 0 week, 0 day, 0 hour, 17 minutes


I was triyng to config  option82 and dhcp snooping :


 dhcp enable

#

dhcp snooping enable

#

dhcp option82 format user-defined "%svlan"

vlan 3000

 name internet

 igmp-snooping enable                     

 dhcp snooping enable                     

 dhcp snooping trusted interface GigabitEthernet0/0/32

 dhcp option82 insert enable interface GigabitEthernet 0/0/1 to 0/0/29


on every interface exapt uplink i entered :


interface GigabitEthernet0/0/30

#client

 port link-type access

 port default vlan 3000

 dhcp option82 insert enable


and on Uplink interface :


interface GigabitEthernet0/0/32

 port link-type trunk

 port trunk allow-pass vlan 2 200 3000

 dhcp snooping trusted


But after i entered  

[HUAWEI-vlan3000]dhcp option82 encapsulation vendor-specific-id 


username  turn to 


demux0.1073751698   100.64.225.120                          00040FA00114:010D534D464C2D30342D4443535739


And  the strange thing is, I deleted all dhcp / option82 configuration, rebooted switch 


<HUAWEI>display dhcp option82 configuration 

<HUAWEI>


<HUAWEI>display dhcp snooping configuration 

<HUAWEI>


<HUAWEI>disp dhcp snooping 

DHCP snooping global running information :

 DHCP snooping                            : Disable  (default)


But !  DHCP snooping works , i receive an IP address  and i have no idea what to do with it



Featured Answers

Recommended answer

Popeye_Wang
Admin Created Oct 6, 2020 11:58:00

Hi,
DHCP snooping is used to prevent DHCP attacks on the network, facilitating security for communication services.
The BRAS can receive DHCP requests even if DHCP snooping is disabled.
View more
  • x
  • convention:

All Answers
Hello,friend

Please wait for a minute.

We are dealing with your problem.
View more
  • x
  • convention:

Hi,
How do you confirm that DHCP snooping is still working when all the DHCP configuration is deleted?
View more
  • x
  • convention:

hi
<Huawei>dhcp enable
<Huawei> dhcp relay server group DHCPSERVER
server x.x.x.x 0
server x.x.x.x 1
x.x.x.----->> ip address For examle (10.60.1.1)

<Huawei>interface Vlanif 1
<Huawei interface Vlanif 1>display this
description Example
ip address x.x.x.1 255.255.255.0
dhcp select relay
dhcp relay binding server group DHCPSERVER
View more
  • x
  • convention:

well i have a PC which is connected to port g0/0/26 and port 0/0/32 is connected to BRAS
I receive a dhcp request on BRAS , and BRAS set an ip address to client.

Reset factory configuration helps me to return switch to normal condition
View more
  • x
  • convention:

Hi,
DHCP snooping is used to prevent DHCP attacks on the network, facilitating security for communication services.
The BRAS can receive DHCP requests even if DHCP snooping is disabled.
View more
  • x
  • convention:

I was trying to repeat the same situation again by entering the command
dhcp option82 append vendor-specific and it did not lead to the same behaviour of the switch.
Probably it was my mistake in config.

View more
  • x
  • convention:

Popeye_Wang
Popeye_Wang Created Oct 9, 2020 01:21:48 (0) (0)
Hi,
Is this solved? What's the 'behavior'/ purpose you want to get? Maybe you can share more...  
Hi!
Yes. I think that situation was a result of my improper configuration.
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.