|
ru.cisco
- RU.CISCO ---------------------------------------------------------------------
From : Edward Phetisoff 2:5020/400 01 Oct 2005 15:24:29
To : Victor Sudakov
Subject : Re: dhcp snooping
--------------------------------------------------------------------------------
"Victor Sudakov" <vas@mpeks.tomsk.su> сообщил/сообщила в новостях следующее:
Приветствую!
>
> При отключенной "ip dhcp information option" действительно работает.
> И даже "ip dhcp relay information trusted" на интерфейсе роутера (по
> совместительству DHCP сервера) перестаёт быть нужным. Hо хочется
> всё-таки заставить работать с включенной information option.
>
Я тебе привел пример "с включенной information option"
> > Если такой вариант тебя не устраивает (no ip dhcp snooping information
> > option), то ВСЕ транковые порты между коммутаторами SwitchA и SwitchB
ЛУЧШЕ
> > сделать как trusted.
>
> Причем из твоей лабы (спасибо за труды!) видно, что транк между
> SwitchA и SwitchA у тебя сделан trusted _в обе_ стороны. Так вот когда
> я пытаюсь это проделать на двух C2950T IOS 12.1(19)EA1c, свичи уходят в
> ступор как при кольце в топологии. У меня такое впечатление, что свич
> флудит DHCP пакеты во _все_ trusted порты, не глядя на src адрес этих
> фреймов и на свою бриджевую таблицу. И начинается пинг-понг.
Если ты уверен в верности своих действий, то:
1. проверь конфиг (какой порт стоит как trusted, а какой untrusted)
2. поменяй софт
http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_gui
de_chapter09186a008047629a.html
Выдержка:
In Cisco IOS Release 12.1(22)EA3 when an aggregation switch can be connected
to an edge switch through an untrusted interface and you enter the ip dhcp
snooping information option allow-untrusted global configuration command,
the aggregation switch accepts packets with option-82 information from the
edge switch. The aggregation switch learns the bindings for hosts connected
through an untrusted switch interface. The DHCP security features, such as
dynamic ARP or IP source guard, can still be enabled on the aggregation
switch while the switch receives packets with option-82 information on
ingress untrusted interfaces to which hosts are connected. The port on the
edge switch that connects to the aggregation switch must be configured as a
trusted interface.
3. Поставь на SwitchA ip dhcp snooping information option allow-untrusted
Если это тебе не поможет, то для тебя одна дорога - в TAC :)
>
> Ты лабу еще не разобрал? Включи, если не трудно, debug ip dhcp
> snooping, проследи, не отправляет ли свич DHCP пакет в том числе в тот
> же самый порт, откуда пакет пришёл :-\ Там в дебаге пишется, куда
> свич решил кинуть пакеты, пришедшие с untrusted порта.
>
> Если кинешь дебаг сюда, вообще будет хорошо.
:) а ты объем дебага видел?
SwitchA#sh logging
Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0
flushes,
0 overruns, xml disabled, filtering disabled)
Console logging: level debugging, 292 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 134 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Trap logging: level informational, 25 message lines logged
Log Buffer (200000 bytes):
00:19:17: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:17: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/2
00:19:17: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:17: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/2)
00:19:17: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa1/0/2, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP
da: 10
.20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHC
P siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:17: DHCP_SNOOPING: delete binding from port FastEthernet1/0/2.
00:19:17: DHCP_SNOOPING: dump binding entry: Mac=00:30:19:67:19:60
Ip=10.20.0.12
0 Lease=85767 ld Type=dhcp-snooping Vlan=2 If=FastEthernet1/0/2
00:19:17: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet1/0/1
3.
00:19:17: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:17: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/2
00:19:17: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:17: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/2)
00:19:17: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa1/0/2, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP
da: 10
.20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHC
P siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:17: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet1/0/1
3.
00:19:18: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:18: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/2
00:19:18: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:18: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/2)
00:19:18: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa1/0/2, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP
da: 10
.20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHC
P siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:18: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet1/0/1
3.
00:19:23: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:23: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/2
00:19:23: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:23: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/2)
00:19:23: DHCP_SNOOPING: process new DHCP packet, message type:
DHCPDISCOVER, in
put interface: Fa1/0/2, MAC da: ffff.ffff.ffff, MAC sa: 0030.1967.1960, IP
da: 2
55.255.255.255, IP sa: 0.0.0.0, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:23: DHCP_SNOOPING_SW: bridge packet get invalid mat entry:
FFFF.FFFF.FFFF,
packet is flooded to ingress VLAN: (2)
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/13 for
pak. W
as not set
00:19:25: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/13
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/13 for
pak. W
as not set
00:19:25: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/13)
00:19:25: DHCP_SNOOPING: process new DHCP packet, message type: DHCPOFFER,
input
interface: Fa1/0/13, MAC da: ffff.ffff.ffff, MAC sa: 0011.2030.bc01, IP da:
255
.255.255.255, IP sa: 10.20.0.1, DHCP ciaddr: 0.0.0.0, DHCP yiaddr:
10.20.0.121,
DHCP siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:25: DHCP_SNOOPING: binary dump of option 82, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:19:25: DHCP_SNOOPING: binary dump of extracted circuit id, length: 8
data:
0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A
00:19:25: DHCP_SNOOPING: binary dump of extracted remote id, length: 10
data:
0x2 0x8 0x0 0x6 0x0 0x11 0x93 0xC1 0x30 0x80
00:19:25: DHCP_SNOOPING_SW: opt82 data indicates not a local packet
00:19:25: DHCP_SNOOPING: can't parse option 82 data of the message,it is
either
in wrong format or not inserted by local switch
00:19:25: DHCP_SNOOPING: direct forward dhcp reply to output port:
FastEthernet1
/0/2.
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:25: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/2
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/2 for pak.
Wa
s not set
00:19:25: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/2)
00:19:25: DHCP_SNOOPING: process new DHCP packet, message type: DHCPREQUEST,
inp
ut interface: Fa1/0/2, MAC da: ffff.ffff.ffff, MAC sa: 0030.1967.1960, IP
da: 25
5.255.255.255, IP sa: 0.0.0.0, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:25: DHCP_SNOOPING_SW: bridge packet get invalid mat entry:
FFFF.FFFF.FFFF,
packet is flooded to ingress VLAN: (2)
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/13 for
pak. W
as not set
00:19:25: DHCPSNOOP(hlfm_set_if_input): Clearing if_input for pak. Was
Fa1/0/13
00:19:25: DHCPSNOOP(hlfm_set_if_input): Setting if_input to Fa1/0/13 for
pak. W
as not set
00:19:25: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet1/0/13)
00:19:25: DHCP_SNOOPING: process new DHCP packet, message type: DHCPACK,
input i
nterface: Fa1/0/13, MAC da: ffff.ffff.ffff, MAC sa: 0011.2030.bc01, IP da:
255.2
55.255.255, IP sa: 10.20.0.1, DHCP ciaddr: 0.0.0.0, DHCP yiaddr:
10.20.0.121, DH
CP siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:19:25: DHCP_SNOOPING: binary dump of option 82, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:19:25: DHCP_SNOOPING: binary dump of extracted circuit id, length: 8
data:
0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A
00:19:25: DHCP_SNOOPING: binary dump of extracted remote id, length: 10
data:
0x2 0x8 0x0 0x6 0x0 0x11 0x93 0xC1 0x30 0x80
00:19:25: DHCP_SNOOPING_SW: opt82 data indicates not a local packet
00:19:25: DHCP_SNOOPING: can't parse option 82 data of the message,it is
either
in wrong format or not inserted by local switch
00:19:25: DHCP_SNOOPING: add binding on port FastEthernet1/0/2.
00:19:25: DHCP_SNOOPING: added entry to table (index 165)
00:19:25: DHCP_SNOOPING: dump binding entry: Mac=00:30:19:67:19:60
Ip=10.20.0.12
1 Lease=86400 ld Type=dhcp-snooping Vlan=2 If=FastEthernet1/0/2
00:19:25: DHCP_SNOOPING: direct forward dhcp reply to output port:
FastEthernet1
/0/2.
SwitchA#
SwitchB#sh logging
Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0
flushes,
0 overruns, xml disabled, filtering disabled)
Console logging: level debugging, 399 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 190 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Trap logging: level informational, 21 message lines logged
Log Buffer (200000 bytes):
00:18:30: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/24)
00:18:30: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa0/24, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP da:
10.
20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:30: DHCP_SNOOPING: delete binding from port FastEthernet0/24.
00:18:30: DHCP_SNOOPING: dump binding entry: Mac=00:30:19:67:19:60
Ip=10.20.0.12
0 Lease=85767 ld Type=dhcp-snooping Vlan=2 If=FastEthernet0/24
00:18:30: DHCP_SNOOPING: add relay information option.
00:18:30: DHCP_SNOOPING_SW: Encoding opt82 in vlan-mod-port format
00:18:30: DHCP_SNOOPING: binary dump of relay info option, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:18:30: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet0/2.
00:18:30: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/24)
00:18:30: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa0/24, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP da:
10.
20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:30: DHCP_SNOOPING: add relay information option.
00:18:30: DHCP_SNOOPING_SW: Encoding opt82 in vlan-mod-port format
00:18:30: DHCP_SNOOPING: binary dump of relay info option, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:18:30: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet0/2.
00:18:31: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/24)
00:18:31: DHCP_SNOOPING: process new DHCP packet, message type: DHCPRELEASE,
inp
ut interface: Fa0/24, MAC da: 0011.2030.bc01, MAC sa: 0030.1967.1960, IP da:
10.
20.0.1, IP sa: 10.20.0.120, DHCP ciaddr: 10.20.0.120, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:31: DHCP_SNOOPING: add relay information option.
00:18:31: DHCP_SNOOPING_SW: Encoding opt82 in vlan-mod-port format
00:18:31: DHCP_SNOOPING: binary dump of relay info option, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:18:31: DHCP_SNOOPING_SW: bridge packet send packet to port:
FastEthernet0/2.
00:18:36: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/24)
00:18:36: DHCP_SNOOPING: process new DHCP packet, message type:
DHCPDISCOVER, in
put interface: Fa0/24, MAC da: ffff.ffff.ffff, MAC sa: 0030.1967.1960, IP
da: 25
5.255.255.255, IP sa: 0.0.0.0, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 0.0.0.0,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:36: DHCP_SNOOPING: add relay information option.
00:18:36: DHCP_SNOOPING_SW: Encoding opt82 in vlan-mod-port format
00:18:36: DHCP_SNOOPING: binary dump of relay info option, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:18:36: DHCP_SNOOPING_SW: bridge packet get invalid mat entry:
FFFF.FFFF.FFFF,
packet is flooded to ingress VLAN: (2)
00:18:36: DHCP_SNOOPING_SW: bridge packet send packet to cpu port: Vlan2.
00:18:38: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/2)
00:18:38: DHCP_SNOOPING: process new DHCP packet, message type: DHCPOFFER,
input
interface: Fa0/2, MAC da: ffff.ffff.ffff, MAC sa: 0011.2030.bc01, IP da:
255.25
5.255.255, IP sa: 10.20.0.1, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 10.20.0.121,
DHC
P siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:38: DHCP_SNOOPING: binary dump of extracted circuit id, length: 8
data:
0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A
00:18:38: DHCP_SNOOPING: binary dump of extracted remote id, length: 10
data:
0x2 0x8 0x0 0x6 0x0 0x11 0x93 0xC1 0x30 0x80
00:18:38: DHCP_SNOOPING_SW: opt82 data indicates local packet
00:18:38: DHCP_SNOOPING: remove relay information option.
00:18:38: DHCP_SNOOPING: direct forward dhcp reply to output port:
FastEthernet0
/24.
00:18:38: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/24)
00:18:38: DHCP_SNOOPING: process new DHCP packet, message type: DHCPREQUEST,
inp
ut interface: Fa0/24, MAC da: ffff.ffff.ffff, MAC sa: 0030.1967.1960, IP da:
255
.255.255.255, IP sa: 0.0.0.0, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 0.0.0.0,
DHCP s
iaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:38: DHCP_SNOOPING: add relay information option.
00:18:38: DHCP_SNOOPING_SW: Encoding opt82 in vlan-mod-port format
00:18:38: DHCP_SNOOPING: binary dump of relay info option, length: 20 data:
0x52 0x12 0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A 0x2 0x8 0x0 0x6 0x0 0x11 0x93
0xC1 0x
30 0x80
00:18:38: DHCP_SNOOPING_SW: bridge packet get invalid mat entry:
FFFF.FFFF.FFFF,
packet is flooded to ingress VLAN: (2)
00:18:38: DHCP_SNOOPING_SW: bridge packet send packet to cpu port: Vlan2.
00:18:38: DHCP_SNOOPING: received new DHCP packet from input interface
(FastEthe
rnet0/2)
00:18:38: DHCP_SNOOPING: process new DHCP packet, message type: DHCPACK,
input i
nterface: Fa0/2, MAC da: ffff.ffff.ffff, MAC sa: 0011.2030.bc01, IP da:
255.255.
255.255, IP sa: 10.20.0.1, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: 10.20.0.121,
DHCP
siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 0030.1967.1960
00:18:38: DHCP_SNOOPING: binary dump of extracted circuit id, length: 8
data:
0x1 0x6 0x0 0x4 0x0 0x2 0x1 0x1A
00:18:38: DHCP_SNOOPING: binary dump of extracted remote id, length: 10
data:
0x2 0x8 0x0 0x6 0x0 0x11 0x93 0xC1 0x30 0x80
00:18:38: DHCP_SNOOPING_SW: opt82 data indicates local packet
00:18:38: DHCP_SNOOPING_SW: opt82 data indicates local packet
00:18:38: DHCP_SNOOPING: add binding on port FastEthernet0/24.
00:18:38: DHCP_SNOOPING: added entry to table (index 165)
00:18:38: DHCP_SNOOPING: dump binding entry: Mac=00:30:19:67:19:60
Ip=10.20.0.12
1 Lease=86400 ld Type=dhcp-snooping Vlan=2 If=FastEthernet0/24
00:18:38: DHCP_SNOOPING: remove relay information option.
00:18:38: DHCP_SNOOPING: direct forward dhcp reply to output port:
FastEthernet0
/24.
00:18:48: DHCP_SNOOPING: checking expired snoop binding entries
SwitchB#
SwitchB#sh run int f0/2
Building configuration...
Current configuration : 213 bytes
!
interface FastEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
no logging event link-status
spanning-tree portfast disable
ip dhcp snooping limit rate 100
ip dhcp snooping trust
end
SwitchA#sh run int f1/0/2
Building configuration...
Current configuration : 163 bytes
!
interface FastEthernet1/0/2
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree bpdufilter disable
spanning-tree bpduguard disable
end
SwitchA#
SwitchA#sh run | b ip dhcp
ip dhcp snooping vlan 2
ip dhcp snooping information option allow-untrusted
ip dhcp snooping database flash:/snooping.txt
ip dhcp snooping
!
SwitchA#sh ip dhcp sno bind
MacAddress IpAddress Lease(sec) Type VLAN
Interface
------------------ --------------- ---------- ------------- ---- ------
--------------
00:30:19:67:19:60 10.20.0.120 86194 dhcp-snooping 2
FastEthernet1/0/2
Total number of bindings: 1
SwitchB#sh ip dhcp sno bind
MacAddress IpAddress Lease(sec) Type VLAN
Interface
------------------ --------------- ---------- ------------- ---- ------
--------------
00:30:19:67:19:60 10.20.0.120 86174 dhcp-snooping 2
FastEthernet0/24
Total number of bindings: 1
SwitchB#
Вообще, делать порт на коммутаторе SwitchA (я так понял это 2950) как
untrusted большого смысла нет, этим ты добьешься только дублирования
информации, которая уже есть на SwitchB.
--- ifmail v.2.15dev5.3
* Origin: Demos online service (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
