Manuals / Allied Telesis / Computer Equipment / Switch

Allied Telesis Rapier i Series, AT-8600 Series manual X Add the tagged uplink ports to the VLAN

Models: AT-8700XL Series AT-8600 Series Rapier i Series

1 26

Download 26 pages 29.76 Kb

Page 15

XAdd the tagged uplink ports to the VLAN:

Configuration examples

XAdd the tagged uplink ports to the VLAN:

add vlan="48" port=24 frame=tagged uplink

XAdd the untagged ports for the customers:

add vlan="48" port=1-23

This is a layer 2 solution. The IP protocol does not need to be configured.

XEnable DHCP snooping and Option 82 support:

enable dhcpsnooping

enable dhcpsnooping option82

It is also possible to enable DHCP snooping ARP security. If enabled, this will ensure that ARP packets received on non-trusted ports are only permitted if they originate from an IP address that has been allocated and snooped by DHCP (enable dhcpsnooping arpsecurity).

XDefine the DHCP snooping trusted ports:

set dhcpsnooping port=24 trusted=yes

These ports can receive Option 82 information, and the switch will permit them to send Option 82.

XDefine the maximum number of DHCP leasees permitted on each port:

set dhcpsnooping port=1-23 maxlease=1

XDefine the string that will be used in the subscriber-ID suboption portion of the Option 82 inserted into DHCP packets:

set dhcpsnooping port=1 subscriberid="Ground Floor Room 1"

Page 15 AlliedWare™ OS How To Note: DHCP Snooping on Rapier-style switches

Image 15

Allied Telesis Rapier i Series manual X Add the tagged uplink ports to the VLAN, X Add the untagged ports for the customers

Contents

AlliedWareTM OS IntroductionWhich products and software version does this information apply to? z AT-8800 series z AT-8600 series z AT-8700XL seriesz Rapier and Rapier i series Related How To Notes Minimum configurationDHCP snooping Verifying the status of snooped users Database survival across rebootsThe database DHCP snooping database time-outList of terms Trusted and non-trusted ports Enabling DHCP snoopingStatic binding Completely removing the DHCP snooping database So the database is emptyDHCP snooping DHCP Option DHCP OptionExample Packet Protocol detailsAnalysis Configuring OptionDHCP filtering Configuring filteringResource considerations X To enable DHCP snooping ARP securityDHCP snooping filter show command ARP securityX If ARP security is enabled, add X or if ARP security is enabled, isExample on a Rapier X Configure a private VLAN for customers Configuration examplesX Define the DHCP snooping trusted ports X Enable DHCP snooping and Option 82 supportX Add the tagged uplink ports to the VLAN X Add the untagged ports for the customersX Create a set of QoS classifiers X Define the upstream QoS flow groupsX Create a traffic class for all upstream flow groups add vlan=48 port=1-24 add vlan=50 port=25 X Configure two VLANs for layer 3 access to the DHCP serverX Add ports to the VLANs create vlan=Customers vid=48 create vlan=Network vid=50X Configure the switch’s IP X For layer 3 support, enable the BOOTP RelayX Define the DHCP snooping trusted port X Enable DHCP snooping and Option 82 supportX Create a set of QoS classifiers X Define the upstream QoS flow groupsX Create a traffic class for all upstream flow groups No trusted ports configured TroubleshootingDHCPSNDB Updating entryId 7. Flags The DHCP client continually sends requests instead of a discoverMaximum number of leases is exceeded DHCPSNProcess 0b47ee6c Error adding entry to DBSwitch is dropping ARPs UntaggedNone TroubleshootingDHCPSNARP 02680e6c ARP to be forwarded, sender validated trusted portsDisplaying log entries The show log command is also very usefulTroubleshooting Appendix 1 ISC DHCP server Appendix 1 ISC DHCP serverif exists agent.circuit-id