Enabling DHCPv4 Proxy

To guarantee the security of a DHCPv4 server, you need to enable DHCPv4 proxy when the DHCPv4 packet sent from the NetEngine 8000 F to a user does not contain the DHCPv4 server IP address.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number [ .subinterface-number ]

    The interface view is displayed.

  3. Run bas

    A BAS interface is created, and the BAS interface view is displayed.

  4. Run access-type layer2-subscriber [ default-domain { pre-authentication predname | authentication [ force | replace ] dname } * ]

    The access type is set to Layer 2 subscriber access and the attributes of this access type are configured.

  5. Run dhcp-proxy enable

    DHCP proxy is enabled.

    • Currently, DHCPv4 proxy is used only for the remote address pool of the BAS. The configuration modification does not take effect on online users.

    • DHCPv4 proxy can also be used for Layer 2 users or Layer 2 leased line users.

  6. (Optional) Run dhcp lease-proxy [ lease-time ]

    DHCP lease proxy is enabled on the BAS interface, and a proxy lease is specified.

    Using shorter proxy leases can accelerate the identification of client or link faults. However, users renew their leases more frequently, increasing the processing load of the device. To balance the conflict between fault detection and processing load, run the dhcp lease-proxy first-step first-step second-step second-step command to enable DHCP lease proxy with step-based proxy leases.

  7. (Optional) Run dhcp lease-proxy renew-packet through-time time-value

    The maximum number of times that a lease proxy user's client sends lease renewal packets to the DHCP server before T1 (1/2 of the lease) or T2 (7/8 of the lease) arrives is configured.

  8. Run commit

    The configuration is committed.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.