subsidii2000 Posted July 13, 2018 Posted July 13, 2018 Добрый день! Проблема с настройкой DAI, DHCP Snooping. На коммутаторе включен DHCP Server. Клиентам раздаются адреса из пула. При попытке включить DHCP Snooping получаю ошибку: #ip dhcp snooping Enable DHCP Snooping unsuccessfully. Other DHCP service is enabled ! Я так понимаю из-за того, что включен DHCP Server. Вопрос: как тогда настроить arp inspection и привязку ip адреса к mac адресу и порту на коммутаторе? ===================================== Alpha-A10E#sh ver Network Operating System Copyright (c) 2006-2015 Orion Networks International, Inc. Product name: Alpha-A10E NOS Version: NOS_4.15.1359_20171213(Compiled Dec 13 2017, 12:10:23) Bootstrap Version: Bootstrap_3.1.7.Alpha-A10E.0.20160922 ============================== Alpha-A10E#sh run System current configuration: !NOS Version NOS_4.15.1359_20171213 !command in view_mode ! !command in config_mode first-step create vlan 134 active ! !command in aclmap_mode ! !command in ipv6 aclmap_mode ! !command in enable_mode terminal time-out 900 hostname A10E clock timezone + 5 0 ! !command in region_mode ! !command in ip igmp profile mode ! !command in service_mode ! !command in port_mode ! interface port 1 description to_PC switchport access vlan 134 flowcontrol on spanning-tree edged-port force-true switchport port-security switchport port-security violation shutdown switchport port-security trap enable switchport port-security mac-address sticky switchport port-security cpu-protect enable ! interface port 2 description to_PC switchport access vlan 134 flowcontrol on spanning-tree edged-port force-true switchport port-security switchport port-security violation shutdown switchport port-security trap enable switchport port-security mac-address sticky switchport port-security cpu-protect enable switchport port-security mac-address sticky 0018.f304.b8f2 vlan 134 ! interface port 9 switchport mode trunk ! interface port 10 switchport mode trunk ! !command in vlan configuration mode vlan 134 name Lan ! !command in ip interface mode interface ip 0 ip address 192.168.134.2 255.255.255.240 134 ip dhcp server ! !command in cmap_mode ! !command in pmap_mode ! !command in aclgroup_mode ! !command in config_mode ip default-gateway 192.168.134.1 ip forwarding storm-control multicast enable port 1-10 storm-control dlf enable port 1-10 dlf-forwarding disable storm-control broadcast bps 128 8 port 9 storm-control multicast bps 128 8 port 9 storm-control dlf bps 128 8 port 9 storm-control detection enable uplink port-list 9,10 arp 192.168.134.1 b838.6121.12af ip dhcp server ip dhcp server ip-pool net134 192.168.134.7 192.168.134.14 255.255.255.240 ip 0 gateway 192.168.134.2 dns 192.168.130.1 no logging console loopback-detection enable port-list 1-10 loopback-detection error-device discarding port-list 1-10 loopback-detection down-time 300 loopback-detection vlan 134 ntp server 192.168.134.1 no auto_config enable no auto_save enable ! Вставить ник Quote
Victor Tkachenko Posted July 17, 2018 Posted July 17, 2018 @subsidii2000, добрый! Функционал DHCP-сервера на Orion A10E вспомогательный, связка с DAI не реализована. При необходимости осуществлять привзяку имеет смысл вынести DHCP-сервер на другое устройство и воспользоваться DHCP snooping/relay. Вставить ник Quote
.png.5d2afa2996cc6a85d0f2c09b92dd0a28.png)
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.