H3c-technologies H3C SecPath F1000-E User Manual

Browse online or download User Manual for Safety H3c-technologies H3C SecPath F1000-E. H3C Technologies H3C SecPath F1000-E User Manual

  • Download
  • Add to my manuals
  • Print
  • Page
    / 198
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 0
i
Table of Contents
ARP Configuration························································································································································1
ARP Overview ···································································································································································1
ARP Function ·····························································································································································1
ARP Message Format···············································································································································1
Operation of ARP ·····················································································································································2
ARP Table··································································································································································3
Configuring ARP································································································································································3
Configuring a Static ARP Entry ·······························································································································3
Configuring the Maximum Number of ARP Entries ······························································································4
Configuring the Maximum Number of Dynamic ARP Entries for an Interface···················································5
Setting the Aging Time for Dynamic ARP Entries ··································································································5
Enabling the ARP Entry Check ································································································································5
Enabling the Support for ARP Requests from a Natural Network·······································································6
Displaying and Maintaining ARP ····································································································································6
ARP Configuration Example·············································································································································7
Gratuitous ARP Configuration····································································································································· 1
Introduction to Gratuitous ARP·········································································································································1
Configuring Gratuitous ARP·············································································································································2
Proxy ARP Configuration············································································································································· 1
Proxy ARP Overview·························································································································································1
Proxy ARP··································································································································································1
Local Proxy ARP························································································································································2
Enabling Proxy ARP ··························································································································································2
Displaying and Maintaining Proxy ARP ·························································································································3
Proxy ARP Configuration Examples ································································································································3
Proxy ARP Configuration Example ·························································································································3
Local Proxy ARP Configuration Example in Case of Port Isolation ·····································································4
Local Proxy ARP Configuration Example in Isolate-User-VLAN ···········································································6
Page view 0
1 2 3 4 5 6 ... 197 198

Summary of Contents

Page 1 - Table of Contents

i Table of Contents ARP Configuration·················································································································

Page 2 - ARP Configuration

1 Gratuitous ARP Configuration This chapter includes these sections: • Introduction to Gratuitous ARP • Configuring Gratuitous ARP Introduction to Gr

Page 3 - Operation of ARP

i Table of Contents IPv6 Basics Configuration·········································································································

Page 4 - Configuring ARP

1 IPv6 Basics Configuration This chapter includes these sections: • IPv6 Overview • IPv6 Basics Configuration Task List • Displaying and Maintaining

Page 5

2 Figure 1 IPv4 packet header format and basic IPv6 packet header format Larger address space The source and destination IPv6 addresses are 128 bi

Page 6 - Enabling the ARP Entry Check

3 Internet Control Message Protocol version 4 (ICMPv4) Router Discovery messages, and ICMPv4 Redirect messages and provides a series of other functio

Page 7

4 Table 1 Mappings between address types and format prefixes Type Format prefix (binary) IPv6 prefix ID Unspecified address 00...0 (128 bits) ::/1

Page 8 - ARP Configuration Example

5 Multicast addresses also include solicited-node addresses. A node uses a solicited-node multicast address to acquire the link-layer address of a ne

Page 9 - [Device] display arp static

6 • Duplicate address detection Router/prefix discovery and address autoconfiguration NOTE: • In addition to an address prefix, the Prefix Informat

Page 10 - Gratuitous ARP Configuration

7 Figure 3 Address resolution The address resolution process is: 1. Host A multicasts an NS message. The source address of the NS message is the I

Page 11 - Configuring Gratuitous ARP

8 2. If Host B uses this IPv6 address, Host B returns an NA message. The NA message contains the IPv6 address of Host B. 3. Host A learns that the I

Page 12

9 Figure 5 PMTU discovery process The PMTU discovery process is: 1. The source host compares its MTU with the packet to be sent, performs necess

Page 13 - Proxy ARP Configuration

2 • Prevent the virtual IP address of a VRRP group from being used by a host The master router of a VRRP group can periodically send gratuitous ARP

Page 14 - Enabling Proxy ARP

10 • RFC 1881: IPv6 Address Allocation Management • RFC 1887: An Architecture for IPv6 Unicast Address Allocation • RFC 1981: Path MTU Discovery f

Page 15

11 Task Remarks Enabling Sending of ICMPv6 Destination Unreachable Messages Optional Configuring Basic IPv6 Functions Enabling IPv6 Enable IPv6 bef

Page 16 - Isolation

12 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Configure the i

Page 17

13 vulnerability, you can configure the temporary address function that enables the system to generate and use temporary IPv6 addresses with differen

Page 18

14 NOTE: • After an IPv6 site-local address or a global unicast address is configured for an interface, a link-local address is generated automati

Page 19 - Step2 Configure the device

15 CAUTION: You can use either method above to configure a static neighbor entry for a VLAN interface. • After a static neighbor entry is configure

Page 20

16 Parameters Description M flag This field determines whether hosts use the stateful autoconfiguration to acquire IPv6 addresses. If the M flag is s

Page 21

17 To do… Use the command… Remarks Configure the hop limit ipv6 nd hop-limit value Optional 64 by default. Enter interface view interface interface

Page 22 - Connected Network

18 NOTE: • The maximum interval for sending RA messages should be less than or equal to the router lifetime in RAmessages. • The values of the NS

Page 23

19 Figure 6 Application environment of ND proxy Because Host A considers that Host B is on the same network, it directly sends an NS message to obt

Page 24 - Configuring TCP Attributes

3 NOTE: • You can enable periodic sending of gratuitous ARP packets on a maximum of 1024 interfaces. • Periodic sending of gratuitous ARP packets

Page 25 - Introduction

20 To do… Use the command… Remarks Configure the interface MTU ipv6 mtu mtu-size Optional The default value varies by interface. Configuring a Sta

Page 26

21 received, the finwait timer is reset upon receipt of the last non-FIN packet and the connection is terminated after the finwait timer expires. •

Page 27 - Optimization

22 Configuring ICMPv6 Packet Sending Configuring the Maximum ICMPv6 Error Packets Sent in an Interval If too many ICMPv6 error packets are sent withi

Page 28

23 • If a received IPv6 packet’s destination IP address is not a local address and its hop limit is 1, the device sends an ICMPv6 Hop Limit Exceeded

Page 29 - Adjacency Table Overview

24 Displaying and Maintaining IPv6 Basics Configuration To do… Use the command… Remarks Display the IPv6 FIB entries display ipv6 fib [ ipv6-addr

Page 30

25 IPv6 Configuration Example Network requirements • The host, device and router are directly connected through GigabitEthernet interfaces. Configu

Page 31

26 3. Configure the host Enable IPv6 for the host to obtain an IPv6 address automatically through IPv6 ND. [Device] display ipv6 neighbors interface

Page 32

27 OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 6 InMcastNotMembers: 25747

Page 33 - DHCP Overview

28 OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 79 InMcastNotMembers: 65 Ou

Page 34 - DHCP Address Allocation

29 InMcastPkts: 28 InMcastNotMembers: 0 OutMcastPkts: 7 InAddrErrors: 0 InD

Page 35 - DHCP Message Format

1 Proxy ARP Configuration This chapter includes these sections: • Proxy ARP Overview • Enabling Proxy ARP • Displaying and Maintaining Proxy ARP • Pr

Page 36 - DHCP Options

i Table of Contents FTP Configuration·················································································································

Page 37 - Self-Defined Options

1 FTP Configuration This chapter includes these sections: • FTP Overview • Configuring the FTP Client • Configuring the FTP Server • Displaying and M

Page 38 - 1. Normal padding format

2 Table 1 Configuration when the device serves as the FTP client Device Configuration Remarks Device (FTP client) Use the ftp command to establish t

Page 39 - Option 184

3 Establishing an FTP Connection To access an FTP server, an FTP client must establish a connection with the FTP server. Two ways are available to es

Page 40

4 Follow these steps to establish an IPv6 FTP connection: To do… Use the command… Remarks Log in to the remote FTP server directly in user view ftp

Page 41 - DHCP Server Configuration

5 4. Use the lcd command to display the local working directory of the FTP client. You can upload the file under this directory, or save the download

Page 42

6 Maintaining and Debugging an FTP Connection After a device serving as the FTP client has established a connection with the FTP server (For how to

Page 43 - Configuration Task List

7 Figure 2 Network diagram for FTPing a startup file from an FTP server InternetDevice10.1.1.1/16FTP serverFTP client10.2.1.1/16PC Configuration pro

Page 44 - Address Pool

8 CAUTION: The startup file used for the next startup must be saved under the root directory of the storage medium (Fora device that has been partit

Page 45

9 Configuring Authentication and Authorization on the FTP Server To allow an FTP user to access certain directories on the FTP server, you need to cr

Page 46

2 A main advantage of proxy ARP is that it is added on a single device without disturbing routing tables of other devices in the network. Proxy ARP a

Page 47

10 Figure 3 Upgrading using the FTP server InternetDeviceFTP serverPCFTP client1.2.1.1/161.1.1.1/16 Configuration procedure Step1 Configure Device

Page 48

11 ftp> put newest.app ftp> bye NOTE: • You can take the same steps to upgrade configuration file with FTP. When upgrading the configuratio

Page 49 - Service

1 TFTP Configuration This chapter includes these sections: • TFTP Overview • Configuring the TFTP Client • Displaying and Maintaining the TFTP Client

Page 50 - Enabling DHCP

2 Table 3 Configuration when the device serves as the TFTP client Device Configuration Remarks Device (TFTP client) • Configure the IP address and

Page 51

3 To do… Use the command… Remarks Enter system view system-view — Use an ACL to control the device’s access to TFTP servers tftp-server [ ipv6 ] ac

Page 52

4 Figure 5 Smooth upgrading using the TFTP client function Configuration procedure Step1 Configure the PC (TFTP Server), the configuration procedu

Page 53

i Table of Contents Tunneling Configuration ··········································································································

Page 54

1 Tunneling Configuration NOTE: The term router in this document refers to a network routing device running a routing protocol. This chapter incl

Page 55

2 processing, but may also lead to upper-layer application failures. Furthermore, they will still face the problem that IPv4 addresses will eventuall

Page 56

3 2. After determining according to the routing table that the packet needs to be forwarded through the tunnel, the device at the source end of the t

Page 57

3 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable local pro

Page 58 - Analysis

4 Tunnel mode Source/destination IP address of the tunnel IP address of the tunnel interface 6to4 tunnel The source IP address is a manually configu

Page 59 - Fundamentals

5 6to4 network to an IPv6 network, a 6to4 router must be used as a gateway to forward packets to the IPv6 network. Such a router is called 6to4 relay

Page 60

6 IPv4 over IPv4 Tunnel Introduction to IPv4 over IPv4 tunneling protocol The IPv4 over IPv4 tunneling protocol (RFC 1853) is developed for IP data p

Page 61

7 Figure 5 Principle of IPv4/IPv6 over IPv6 tunnel The original data in Figure 5 refers to an IPv4 or IPv6 packet. Encapsulation and de-encapsulati

Page 62 - Agent Interface

8 Figure 6 Network diagram for 6PE When an ISP wants to utilize the existing IPv4/MPLS network to provide IPv6 traffic switching capability through

Page 63 - Functions

9 Configuring a Tunnel Interface Follow these steps to configure a tunnel interface: To do… Use the command… Remarks Enter system view system-view

Page 64

10 To do… Use the command… Remarks Enable IPv6 ipv6 Required By default, the IPv6 packet forwarding function is disabled. Enter tunnel interface vi

Page 65 - Enabling Offline Detection

11 Configuration Example Network requirements As shown in Figure 7, two IPv6 networks are connected to an IPv4 network through Device A and Device B

Page 66 - Option 82

12 [DeviceB] ipv6 # Configure an IPv4 address for GigabitEthernet 1/2. [DeviceB] interface gigabitethernet 1/2 [DeviceB-GigabitEthernet1/2] ip addres

Page 67

13 Joined group address(es): FF02::1:FF00:0 FF02::1:FF00:1 FF02::1:FFA8:3201 FF02::2 FF02::1 MTU is 1480 bytes ND reachable

Page 68

4 Figure 6 Network diagram for proxy ARP Configuration procedure # Specify the IP address of interface GigabitEthernet 0/2. <Device> system-v

Page 69

14 To do… Use the command… Remarks Enter system view system-view — Enable the IPv6 packet forwarding function ipv6 Required By default, the IPv6 pa

Page 70

15 Figure 8 Network diagram for an automatic IPv4-compatible IPv6 tunnel Configuration procedure NOTE: Make sure that Device A and Device B are

Page 71 - DHCP Client Configuration

16 Tunnel0 current state :UP Line protocol current state :UP IPv6 is enabled, link-local address is FE80::C0A8:6401 Global unicast address(es):

Page 72

17 --- ::192.168.50.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max =

Page 73 - 3. Verification

18 NOTE: • No destination address needs to be configured for a 6to4 tunnel because the destination address can automatically be obtained from the

Page 74

19 • Configuration on Device A. # Enable IPv6. <DeviceA> system-view [DeviceA] ipv6 # Configure an IPv4 address for GigabitEthernet 1/2. [Devi

Page 75 - BOOTP Client Configuration

20 Pinging 2002:501:101:1::2 from 2002:201:101:1::2 with 32 bytes of data: Reply from 2002:501:101:1::2: bytes=32 time=13ms Reply from 2002:501:101:

Page 76 - IP Address Through BOOTP

21 # Configure an IPv4 address for GigabitEthernet 1/2. [DeviceA] interface gigabitethernet 1/2 [DeviceA-GigabitEthernet1/2] ip address 2.1.1.1 255.2

Page 77

22 Reply from 2001::2: bytes=32 time=13ms Reply from 2001::2: bytes=32 time=1ms Reply from 2001::2: bytes=32 time=1ms Reply from 2001::2: bytes=32 t

Page 78

23 To do… Use the command… Remarks Configure a source address or interface for the tunnel source { ip-address | interface-type interface-number } R

Page 79

5 Figure 7 Network diagram for local proxy ARP between isolated ports NOTE: • The switch in this diagram is a distributed device. • In this con

Page 80 - DHCPv6 Overview

24 [Device-GigabitEthernet1/2] ipv6 address 3001::1/64 [Device-GigabitEthernet1/2] quit [Device] interface gigabitethernet 1/1 [Device-GigabitEtherne

Page 81 - Address/Prefix Lease Renewal

25 does not use Neighbor Discovery uses Router Discovery routing preference 1 EUI-64 embedded IPv4 address: 2.1.1.2 router link-layer addre

Page 82

26 To do… Use the command… Remarks Enter tunnel interface view interface tunnel number — Configure an IPv4 address for the tunnel interface ip addr

Page 83 - Operation

27 Figure 12 Network diagram for an IPv4 over IPv4 tunnel GE1/110.1.1.1/24GE2/02.1.1.1/24GE1/110.1.3.1/24Device AIPv4 netwokIPv4Group 1Tunnel110.1.2.

Page 84 - DHCPv6 Server Configuration

28 [DeviceB-GigabitEthernet1/1] quit # Configure an IPv4 address for GigabitEthernet 2/1 (the physical interface of the tunnel). [DeviceB] interface

Page 85 - Prefix Selection Process

29 The Maximum Transmit Unit is 64000 Internet Address is 10.1.2.2/24 Primary Encapsulation is TUNNEL, service-loopback-group ID not set Tunnel sourc

Page 86 - Creating a Prefix Pool

30 To do… Use the command… Remarks Configure an IPv4 address for the tunnel interface ip address ip-address { mask | mask-length } [ sub ] Required

Page 87

31 Configuration procedure NOTE: Make sure that Device A and Device B are reachable to each other. • Configuration on Device A # Enable IPv6. &l

Page 88

32 # Create the interface tunnel 2. [DeviceB] interface tunnel 2 # Configure an IPv4 address for the interface tunnel 2. [DeviceB-Tunnel2] ip address

Page 89 - Configuration considerations

33 Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0 Last 300 second

Page 90

6 The ping operation from Host A to Host B is unsuccessful because they are isolated at Layer 2 and Layer 3. # Configure local proxy ARP to allow com

Page 91

34 To do… Use the command… Remarks or site-local address ipv6 address ipv6-address/prefix-length eui-64 ipv6 address auto link-local interface Con

Page 92

35 Configuration Example Network requirements As shown in Figure 14, the two subnets Group 1 and Group 2 running IPv6 are interconnected by using an

Page 93

36 [DeviceA-Tunnel1] quit # Configure a static route from Device A through the interface tunnel 1 to Group 2. [DeviceA] ipv6 route-static 2002:3:: 64

Page 94

37 MTU is 1460 bytes ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for a

Page 95

38 Displaying and Maintaining Tunneling Configuration To do… Use the command… Remarks Display information about tunnel interfaces display interface

Page 96

i Table of Contents NAT-PT Configuration··············································································································

Page 97 - DHCPv6 Client Configuration

1 NAT-PT Configuration This chapter includes these sections: • NAT-PT Overview • Configuring NAT-PT • Displaying and Maintaining NAT-PT • NAT-PT Conf

Page 98

2 Dynamic mappings are dynamically generated for translation between IPv6 and IPv4 addresses. Different from static mappings, dynamic mappings are no

Page 99

3 translated into a valid IPv4 address, the destination IPv6 address is translated into that IPv4 address. Otherwise, the translation fails. 4. For

Page 100

4 Currently, NAT-PT supports Internet Control Message Protocol (ICMP), Domain Name System (DNS), File Transfer Protocol (FTP), and other protocols th

Page 101 - IPv6 Basics Configuration

7 [Switch-vlan5] quit [Switch] isolate-user-vlan 5 secondary 2 3 Step2 Configure the device # Specify the IP address of GigabitEthernet 0/2. <Dev

Page 102

5 • Enable IPv6 on the device. For more information, see IPv6 Basics Configuration in the IP Services Volume. • Configure an IPv4 or IPv6 address a

Page 103 - IPv6 Addresses

6 To do… Use the command… Remarks Enter system view system-view — Configure a static IPv4/IPv6 address mapping on the IPv6 side natpt v6bound stati

Page 104 - Multicast addresses

7 To do… Use the command… Remarks Associate an IPv6 ACL with an address pool: If the source IPv6 address of an IPv6 packet matches the specified IP

Page 105

8 • If the destination IPv6 address in a packet sent from an IPv6 host to an IPv4 host matches a static IPv4/IPv6 address mapping, the destination I

Page 106 - Address resolution

9 Follow these steps to set the Traffic Class field in packets after NAT-PT translation: To do… Use the command… Remarks Enter system view system-v

Page 107 - Duplicate address detection

10 To do… Use the command… Remarks Display NAT-PT statistics information display natpt statistics Available in any view Clear all NAT-PT statistics

Page 108 - IPv6 PMTU Discovery

11 [DeviceB] natpt v6bound dynamic prefix 3001:: address-group 1 Step2 Configure Device A on the IPv4 side # Configure a static route to subnet 9.0.

Page 109 - Protocols and Standards

12 # Configure interface addresses and enable NAT-PT on the interfaces. <DeviceB> system-view [DeviceB] ipv6 [DeviceB] interface gigabitethern

Page 110

13 1 2001::0002 ^ 0 9.0.0.5 ^ 0 ICMP 3001::0005 ^ 0 8.0.0.2

Page 111 - Addresses

1 ARP Configuration This chapter includes these sections: • ARP Overview • Configuring ARP • Displaying and Maintaining ARP • ARP Configuration Examp

Page 112 - Manual configuration

i Table of Contents IP Performance Optimization Configuration ························································································

Page 113

1 IP Performance Optimization Configuration This chapter includes these sections: • IP Performance Optimization Overview • Enabling Reception and For

Page 114 - Configuring IPv6 ND

2 Enabling Reception of Directed Broadcasts to a Directly Connected Network If a device is enabled to receive directed broadcasts, the device will de

Page 115 - Learned

3 GigabitEthernet 0/1 (IP address 1.1.1.2/24) of Device A. Configure a static route to the host on Device B. It is required that directed broadcasts

Page 116

4 Configuring TCP Attributes Configuring TCP MSS for the Interface The Max Segment Size (MSS) option informs the receiver of the largest segment that

Page 117

5 • finwait timer: When a TCP connection is changed into FIN_WAIT_2 state, the finwait timer is started. If no FIN packet is received within the tim

Page 118 - Enabling ND Proxy

6 If the device received an IP packet with a timeout error, it drops the packet and sends an ICMP timeout packet to the source. The device will send

Page 119 - Configuring PMTU Discovery

7 Configuration Procedure Follow these steps to enable sending of ICMP error packets: To do… Use the command… Remarks Enter system view system-vie

Page 120

i Table of Contents Adjacency Table Configuration ····································································································

Page 121

1 Adjacency Table Configuration This chapter includes these sections: • Adjacency Table Overview • Displaying and Maintaining Adjacency Table NOTE

Page 122 - Interval

2 • Sender hardware address: This field specifies the hardware address of the device sending the message. • Sender protocol address: This field spe

Page 123 - Messages

2 • Link media type: Related to the link layer protocol used by the outgoing interface. P2P indicates point-to-point, such as the point-to-point pro

Page 124 - Configuration

i Table of Contents DHCP Overview·····················································································································

Page 125 - IPv6 Configuration Example

ii DHCP Relay Agent Configuration·····················································································································

Page 126 - Verification

1 DHCP Overview This chapter includes these sections: • Introduction to DHCP • DHCP Address Allocation • DHCP Message Format • DHCP Options • Protoco

Page 127

2 DHCP Address Allocation Allocation Mechanisms DHCP supports three mechanisms for IP address allocation. • Manual allocation: The network administr

Page 128

3 IP Address Lease Extension The IP address dynamically allocated by a DHCP server to a client has a lease. When the lease expires, the IP address i

Page 129 - Solution

4 • siaddr: Server IP address, from which the client obtained configuration parameters. • giaddr: IP address of the first relay agent a request mes

Page 130

5 • Option 33: Static route option. It specifies a list of classful static routes (the destination addresses in these static routes are classful) th

Page 131 - FTP Configuration

6 Figure 6 Format of the value field of the ACS parameter sub-option • The value field of the service provider identifier sub-option contains the

Page 132 - Configuring the FTP Client

7 Figure 8 Sub-option 1 in normal padding format Sub-option type (0x01)0715Length (0x06) Circuit ID type (0x00) Length (0x04)23 31VLAN ID Interface n

Page 133

3 ARP Table After obtaining the MAC address of a host, the device puts the IP-to-MAC mapping into its own ARP table. This mapping is used for forward

Page 134

8 • Sub-option 4: Failover route that specifies the destination IP address and the called number that a Session Initiation Protocol (SIP) user uses

Page 135

1 DHCP Server Configuration This chapter includes these sections: • Introduction to DHCP Server • DHCP Server Configuration Task List • Displaying an

Page 136 - Network requirements

2 After establishment of the inheritance relationship, the new configuration at the higher level (father) of the tree will be: • Inherited if the lo

Page 137 - Configuration procedure

3 If no IP address is assignable, the server does not respond. NOTE: Option 50 is the requested IP address field in DHCP-DISCOVER messages. It is

Page 138 - Configuring the FTP Server

4 Creating a DHCP Address Pool When creating a DHCP address pool, specify it as a common address pool or an extended address pool. Follow these steps

Page 139

5 To do… Use the command… Remarks or client ID Specify the client ID static-bind client-identifier client-identifier Neither is bound statically b

Page 140

6 NOTE: • In common address pool view, using the network command repeatedly overwrites the previous configuration. • After you exclude IP address

Page 141 - System Volume

7 Configuring a Domain Name Suffix for the Client You can specify a domain name suffix in each DHCP address pool on the DHCP server to provide the cl

Page 142 - TFTP Configuration

8 • h (hybrid)-node: A combination of peer-to-peer first and broadcast second. The h-node client unicasts the destination name to the WINS server, i

Page 143 - Configuring the TFTP Client

9 To do… Use the command… Remarks Specify gateways gateway-list ip-address&<1-8> Required No gateway is specified by default. Configuri

Page 144

4 To do… Use the command… Remarks Configure a long static ARP entry arp static ip-address mac-address vlan-id interface-type interface-number [ vp

Page 145

10 Follow these steps to configure a self-defined DHCP option in the DHCP address pool: To do… Use the command… Remarks Enter system view system-v

Page 146

11 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable the D

Page 147 - Tunneling Configuration

12 Configuring the DHCP Server Security Functions This configuration is necessary to secure DHCP services on the DHCP server. Configuration Prerequis

Page 148 - IPv6 over IPv4 Tunnel

13 To do… Use the command… Remarks Configure a timeout waiting for ping responses dhcp server ping timeout milliseconds Optional 500 ms by default

Page 149

14 To do… Use the command… Remarks Enter system view system-view — Enable the DHCP server to send trap messages to the network management server

Page 150

15 The DHCP server configuration for the two types is the same. Static IP Address Assignment Configuration Example Network requirements As shown in F

Page 151 - 5. ISATAP tunnel

16 [DeviceA-dhcp-pool-1] gateway-list 10.1.1.126 3. Verification After the preceding configuration is complete, Device B can obtain IP address 10.1.

Page 152 - IPv4/IPv6 over IPv6 Tunnel

17 # Enable DHCP. <DeviceA> system-view [DeviceA] dhcp enable # Exclude IP addresses from dynamic allocation (addresses of the DNS server, WINS

Page 153 - 6PE Overview

18 Figure 13 Network diagram for self-defined option configuration Configuration procedure 1. Specify IP address for interface GigabitEthernet 0/1

Page 154

1 DHCP Relay Agent Configuration This chapter includes these sections: • Introduction to DHCP Relay Agent • DHCP Relay Agent Configuration Task List

Page 155 - Configuration Procedure

5 NOTE: • The setting can take effect only after you save it and restart the system. • When the maximum number of ARP entries the system supports

Page 156 - IP Routing Volume

2 No matter whether a relay agent exists or not, the DHCP server and client interact with each other in a similar way (see section Dynamic IP Address

Page 157 - Configuration Example

3 If a client’s requesting message has… Handling strategy Padding format The DHCP relay agent will… user-defined Forward the message after replacing

Page 158 - Configuration verification

4 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable the DHC

Page 159

5 • The group-id argument in the dhcp relay server-select command is configured by using the dhcp relay server-group command. Configuring the DHCP

Page 160

6 With this feature, the DHCP relay agent uses the IP address of a client and the MAC address of the DHCP relay interface to periodically send a DHCP

Page 161

7 relieves DHCP starvation attack that comprises DHCP packets encapsulated with different source MAC addresses. To prevent a DHCP starvation attack t

Page 162

8 Configuring the DHCP Relay Agent to Send DHCP-RELEASE Messages This task allows you to release a client’s IP address manually on the DHCP relay age

Page 163 - Configuring a 6to4 Tunnel

9 To do… Use the command… Remarks Configure the code type for the circuit ID sub-option dhcp relay information circuit-id format-type { ascii | hex

Page 164

10 To do… Use the command… Remarks Display information about the refreshing interval for entries of dynamic IP-to-MAC bindings display dhcp relay s

Page 165

11 # Enable the DHCP relay agent on GigabitEthernet 0/1. [DeviceA] interface gigabitethernet 0/1 [DeviceA-GigabitEthernet0/1] dhcp select relay # Cor

Page 166

6 To do… Use the command… Remarks Enter system view system-view — Enable the ARP entry check arp check enable Optional By default, ARP entry check

Page 167

12 NOTE: You need to perform corresponding configurations on the DHCP server to make the Option 82 configurations function normally. Troubleshooti

Page 168 - Configuring an ISATAP Tunnel

1 DHCP Client Configuration This chapter includes these sections: • Introduction to DHCP Client • Enabling the DHCP Client on an Interface • Displayi

Page 169

2 Displaying and Maintaining the DHCP Client To do… Use the command… Remarks Display specified configuration information display dhcp client [ ver

Page 170

3 # Enable DHCP. [DeviceA] dhcp enable # Exclude an IP address from automatic allocation. [DeviceA] dhcp server forbidden-ip 10.1.1.2 # Configure DHC

Page 171

4 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0

Page 172

1 BOOTP Client Configuration This chapter includes these sections: • Introduction to BOOTP Client • Configuring an Interface to Dynamically Obtain a

Page 173

2 A BOOTP client dynamically obtains an IP address from a BOOTP server in the following steps: 1. The BOOTP client broadcasts a BOOTP request, whic

Page 174

3 Configuration procedure The following describes only the configuration on Device B serving as a client. # Configure GigabitEthernet 0/1 to dynamica

Page 175

i Table of Contents DHCPv6 Overview···················································································································

Page 177

7 NOTE: Clearing ARP entries from the ARP table may cause communication failures. ARP Configuration Example Network requirements As shown in Figur

Page 178

1 DHCPv6 Overview This chapter includes these sections: • Introduction to DHCPv6 • DHCPv6 Address/Prefix Assignment • Address/Prefix Lease Renewal •

Page 179

2 1. The DHCPv6 client sends out a Solicit message that contains a Rapid Commit option, requesting that rapid assignment of address/prefix and other

Page 180

3 Figure 3 Using the Renew message for address/prefix lease renewal As shown in Figure 3, at T1, the DHCPv6 client unicasts a Renew message to the

Page 181

4 With an IPv6 address obtained through stateless address autoconfiguration, a device automatically enables the stateless DHCPv6 function after it re

Page 182

1 DHCPv6 Server Configuration This chapter includes these sections: • Introduction to the DHCPv6 Server • DHCPv6 Server Configuration Task List • Con

Page 183

2 Basic Concepts DHCPv6 multicast address The multicast address FF05::1:3 identifies all DHCPv6 servers on the site-local network. The multicast addr

Page 184

3 static prefixes configured for specific clients, or have a prefix pool referenced for dynamic assignment from the specific prefix range. A DHCPv6 s

Page 185

4 To do… Use the command… Remarks Create a prefix pool ipv6 dhcp prefix-pool prefix-pool-number prefix prefix/prefix-len assign-len assign-len Requ

Page 186 - NAT-PT Configuration

5 Applying the Address Pool to an Interface After an address pool is applied to an interface, a prefix and other configuration parameters can be sele

Page 187 - Implementing NAT-PT

6 DHCPv6 Server Configuration Example Network requirements As shown in Figure 8, the device serves as a DHCPv6 server, and assigns the IPv6 prefix, D

Page 188 - NAT-PT Limitations

8 # View information about static ARP entries. [Device] display arp static Type: S-Static D-Dynamic A-Authorized IP Address

Page 189 - Configuring NAT-PT

7 [Device-Vlan-interface2] ipv6 address 1::1/64 [Device-Vlan-interface2] quit # Create and configure prefix pool 1. [Device] ipv6 dhcp prefix-pool 1

Page 190 - Configuring a NAT-PT Prefix

8 2:2::3 Domain name: aaa.com SIP server address: 2:2::4 SIP server domain name: bbb.com # Display the information of prefix pool 1

Page 191

1 DHCPv6 Relay Agent Configuration This chapter includes these sections: • Introduction to the DHCPv6 Relay Agent • Configuring the DHCPv6 Relay Agen

Page 192

2 Operation of DHCPv6 Relay Agent Figure 10 Operating process of a DHCPv6 relay agent Take the process of rapid assignment involving two messages a

Page 193 - natpt-prefix

3 Configuration Procedure Follow these steps to configure the DHCPv6 relay agent: To do… Use the command… Remarks Enter system view system-view — E

Page 194

4 DHCPv6 Relay Agent Configuration Example Network requirements As shown in Figure 11, the network address prefix of DHCPv6 clients is 1::/64, and th

Page 195

5 Verification # After completing the above configurations, display DHCPv6 server address information on Router A. [Device-GigabitEthernet0/1] displa

Page 196

1 DHCPv6 Client Configuration This chapter includes these sections: • Introduction to the DHCPv6 Client • Configuring the DHCPv6 Client • Displaying

Page 197

2 NOTE: • For more information about the ipv6 address auto command, see IPv6 Basics Commands in the IP Services Volume. • It is not recommended t

Page 198 - Troubleshooting NAT-PT

3 # Enable the router to send RA messages. [Router-GigabitEthernet0/1] undo ipv6 nd ra halt Step2 Configure the device # Enable the IPv6 packet forw

Comments to this Manuals

No comments