dhcp snooping防止私接小路由

dhcp snooping防止私接小路由

lsw1交换机配置如下：

<lsw1>dis cu
#
sysname lsw1
#
undo info-center enable
#
vlan batch 10
#
dhcp enable
#
dhcp snooping enable
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
dhcp snooping enable
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
dhcp snooping enable
#
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 10
dhcp snooping trusted

lsw2交换机配置如下：

[lsw2]dis cu
#
sysname lsw2
#
undo info-center enable
#
vlan batch 10
#
dhcp enable
#
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select interface
dhcp server dns-list 8.8.8.8
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10

验证现象：

查看自动获取的ip地址：

查看绑定的dhcp snooping地址所有信息