No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
How Do I Configure DHCP Static Binding (Using the CLI)?

How Do I Configure DHCP Static Binding (Using the CLI)?

Procedure

  • Configure DHCP static binding on interfaces.

    <Huawei> system-view
    [Huawei] dhcp enable
    [Huawei] interface gigabitethernet 1/0/0
    [Huawei-GigabitEthernet1/0/0] ip address 10.10.10.10 24 
    [Huawei-GigabitEthernet1/0/0] dhcp select interface
    [Huawei-GigabitEthernet1/0/0] dhcp server static-bind ip-address 10.10.10.10 mac-address 2020-e2f3-2a3b
  • Configure DHCP static binding globally.

    <Huawei> system-view
    [Huawei] ip pool global1
    [Huawei-ip-pool-global1] network 192.168.1.10 mask 24
    [Huawei-ip-pool-global1] static-bind ip-address 192.168.1.10 mac-address dcd2-fc96-e4c0
    

More Information

Assigning fixed IP addresses to clients by a DHCP server, IP source guard (IPSG), and static ARP involve the binding relationship between IP addresses and MAC addresses. However, the three functions have different application scenarios and implementations, as shown in Table 29-60.
Table 29-60  Differences between assigning fixed IP addresses to clients by a DHCP server, IPSG, and static ARP
Function Usage Scenario Implementation Configuration Method
Assigning fixed IP addresses to clients by a DHCP server

Some clients (such as servers and PCs) require fixed IP addresses from a DHCP server.

The MAC addresses of these clients are bound to fixed IP addresses. When such a client applies to the DHCP server for an IP address, the DHCP server searches the binding entries for the MAC address of the client and allocates the matched IP address to the client.

For details about configuring DHCP static binding, see Huawei AR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200&AR3600 Series Enterprise Routers CLI-based Configuration-IP Service Configuration Guide-DHCP Configuration-Configuring a DHCP Server-Configuring a DHCP Server to Allocate IP Addresses to Clients-(Optional) Configuring a DHCP Server to Allocate Fixed IP Addresses to Specified Clients.

IPSG
Attacks including IP address spoofing and ARP spoofing need to be prevented:
  • IP address spoofing: An attacker uses a forged IP address and its own MAC address to obtain rights of the attacked device and intercept packets destined for the attacked device.
  • ARP spoofing: An attacker sends ARP packets using a forged MAC address to intercept packets destined for the attacked device or using the MAC address of the gateway to intercept all packets destined for the gateway.

The mapping between IP addresses and MAC addresses is set up on a device. When receiving an ARP Request packet, the device searches for the mapped MAC address based on the source IP address of the packet and compares the mapped MAC address with the source MAC address in the packet header. If the two MAC addresses are different from each other, the device considers the packet invalid and discards it.

For details about configuring IPSG static binding, see Huawei AR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200&AR3600 Series Enterprise Routers CLI-based Configuration-Security Configuration Guide-IPSG Configuration-Configuring IPSG-Configuring IPSG Based on a Static Binding Table.

Static ARP
The mapping between IP addresses and MAC addresses is manually configured in the following scenarios:
  • Packets whose destination IP addresses are not on the local network segment need to be forwarded by a gateway on the local network segment.
  • Destination IP addresses of invalid packets need to be bound to a nonexistent MAC address to filter them out.
  • Critical devices need to forward packet securely and be protected against attacks, such as ARP flooding. In this situation, static ARP entries can be configured to bind MAC addresses to specific IP addresses. Network attackers cannot modify the mapping between the IP and MAC addresses, which ensures communication between the two devices.

The mapping between IP addresses and MAC addresses is set up on a device. When receiving an ARP Request packet, the device searches for the MAC address mapped to the IP address in the packet and responds with an ARP Reply packet.

Static ARP entries are manually configured and maintained. These entries are neither aged nor overwritten by dynamic ARP entries, and therefore improve communication security.

For details about configuring ARP static binding, see Huawei AR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200&AR3600 Series Enterprise Routers CLI-based Configuration-IP Service Configuration Guide-ARP Configuration-Configuring ARP-Configuring Static ARP.

For details about configuring DHCP static binding through the web system, see How Do I Configure DHCP Static Binding (Using the Web System)?

Translation
Download
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 447552

Downloads: 4305

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next