1-5z On port GigabitEthernet 1/0/1 of Switch A, enable dynamic binding function to prevent attackersfrom using forged IP addresses to attack the server.For detailed configuration of a DHCP server, refer to DHCP Configuration in the IP Service Volume.Network diagramFigure 1-2 Network diagram for configuring dynamic binding functionConfiguration procedure1) Configure Switch A# Configure dynamic binding function on port GigabitEthernet 1/0/1. system-view[SwitchA] interface gigabitethernet1/0/1[SwitchA-GigabitEthernet1/0/1] ip check source ip-address mac-address[SwitchA-GigabitEthernet1/0/1] quit# Enable DHCP snooping.[SwitchA] dhcp-snooping# Configure the port connecting to the DHCP server as a trusted port.[SwitchA] interface gigabitethernet 1/0/2[SwitchA-GigabitEthernet1/0/2] dhcp-snooping trust[SwitchA-GigabitEthernet1/0/2] quit2) Verify the configuration# Display dynamic binding function is configured successfully on port GigabitEthernet 1/0/1.[SwitchA] interface gigabitethernet 1/0/1[SwitchA-GigabitEthernet1/0/1] display this#interface GigabitEthernet1/0/1ip check source ip-address mac-address#return# Display the dynamic binding entries that port GigabitEthernet 1/0/1 has obtained from DHCPsnooping.[SwitchA-GigabitEthernet1/0/1] display ip check sourceTotal entries found: 1MAC IP Vlan Port Status0001-0203-0406 192.168.0.1 1 GigabitEthernet 1/0/1 DHCP-SNP# Display the dynamic entries of DHCP snooping and check it is identical with the dynamic entries thatport GigabitEthernet 1/0/1 has obtained.[SwitchA-GigabitEthernet1/0/1] display dhcp-snoopingDHCP Snooping is enabled.
