1.配置IPSG防止主机仿冒其他主机IP地址(静态绑定)
[SW1]user-bind static ip-address 192.168.1.1 mac-address 5489-9848-3711
[SW1]user-bind static ip-address 192.168.1.2 mac-address 5489-9896-2625
//创建静态绑定表项
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]ip source check user-bind enable
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]ip source check user-bind enable
//接口使能IPSG功能
[SW1]display dhcp static user-bind all
192.168.1.1 5489-9848-3711 -- /-- /-- --
192.168.1.2 5489-9896-2625 -- /-- /-- --
//查看静态表项
配置IPSG防止主机仿冒其他主机IP地址(动态绑定)
1)R1配置DHCP服务器
[R1]dhcp enable
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.254 24
[R1-GigabitEthernet0/0/0]dhcp select global
[R1]ip pool dsrw
R1-ip-pool-dsrw]gateway-list 192.168.1.254
[R1-ip-pool-dsrw]network 192.168.1.0 mask 255.255.255.0
[R1-ip-pool-dsrw]dns-list 8.8.8.8 114.114.114.114
2)SW1配置
[SW1]dhcp enable
[SW1]dhcp snooping enable
[SW1]vlan 1
[SW1-vlan1]dhcp snooping enable
//VLAN使能dhcp snooping
[SW1-vlan1]dhcp snooping trusted interface GigabitEthernet 0/0/24
//配置为信任接口
[SW1-vlan1]ip source check user-bind enable
//使能IPSG功能
3)PC1配置静态IP地址,PC2设置动态获取IP地址,SW1查看绑定
[SW1]display dhcp snooping user-bind all
192.168.1.253 5489-9896-2625 1 /-- /-- GE0/0/2 2023.02.15-19:02
© 版权声明
文章版权归作者所有,未经允许请勿转载。
THE END
请登录后查看评论内容