H3c-technologies H3C SecPath F1000-E Bedienungsanleitung

Stöbern Sie online oder laden Sie Bedienungsanleitung nach Sicherheit H3c-technologies H3C SecPath F1000-E herunter. H3C Technologies H3C SecPath F1000-E User Manual Benutzerhandbuch

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 198
  • Inhaltsverzeichnis
  • FEHLERBEHEBUNG
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 0
i
Table of Contents
ARP Configuration························································································································································1
ARP Overview ···································································································································································1
ARP Function ·····························································································································································1
ARP Message Format···············································································································································1
Operation of ARP ·····················································································································································2
ARP Table··································································································································································3
Configuring ARP································································································································································3
Configuring a Static ARP Entry ·······························································································································3
Configuring the Maximum Number of ARP Entries ······························································································4
Configuring the Maximum Number of Dynamic ARP Entries for an Interface···················································5
Setting the Aging Time for Dynamic ARP Entries ··································································································5
Enabling the ARP Entry Check ································································································································5
Enabling the Support for ARP Requests from a Natural Network·······································································6
Displaying and Maintaining ARP ····································································································································6
ARP Configuration Example·············································································································································7
Gratuitous ARP Configuration····································································································································· 1
Introduction to Gratuitous ARP·········································································································································1
Configuring Gratuitous ARP·············································································································································2
Proxy ARP Configuration············································································································································· 1
Proxy ARP Overview·························································································································································1
Proxy ARP··································································································································································1
Local Proxy ARP························································································································································2
Enabling Proxy ARP ··························································································································································2
Displaying and Maintaining Proxy ARP ·························································································································3
Proxy ARP Configuration Examples ································································································································3
Proxy ARP Configuration Example ·························································································································3
Local Proxy ARP Configuration Example in Case of Port Isolation ·····································································4
Local Proxy ARP Configuration Example in Isolate-User-VLAN ···········································································6
Seitenansicht 0
1 2 3 4 5 6 ... 197 198

Inhaltsverzeichnis

Seite 1 - Table of Contents

i Table of Contents ARP Configuration·················································································································

Seite 2 - ARP Configuration

1 Gratuitous ARP Configuration This chapter includes these sections: • Introduction to Gratuitous ARP • Configuring Gratuitous ARP Introduction to Gr

Seite 3 - Operation of ARP

i Table of Contents IPv6 Basics Configuration·········································································································

Seite 4 - Configuring ARP

1 IPv6 Basics Configuration This chapter includes these sections: • IPv6 Overview • IPv6 Basics Configuration Task List • Displaying and Maintaining

Seite 5

2 Figure 1 IPv4 packet header format and basic IPv6 packet header format Larger address space The source and destination IPv6 addresses are 128 bi

Seite 6 - Enabling the ARP Entry Check

3 Internet Control Message Protocol version 4 (ICMPv4) Router Discovery messages, and ICMPv4 Redirect messages and provides a series of other functio

Seite 7

4 Table 1 Mappings between address types and format prefixes Type Format prefix (binary) IPv6 prefix ID Unspecified address 00...0 (128 bits) ::/1

Seite 8 - ARP Configuration Example

5 Multicast addresses also include solicited-node addresses. A node uses a solicited-node multicast address to acquire the link-layer address of a ne

Seite 9 - [Device] display arp static

6 • Duplicate address detection Router/prefix discovery and address autoconfiguration NOTE: • In addition to an address prefix, the Prefix Informat

Seite 10 - Gratuitous ARP Configuration

7 Figure 3 Address resolution The address resolution process is: 1. Host A multicasts an NS message. The source address of the NS message is the I

Seite 11 - Configuring Gratuitous ARP

8 2. If Host B uses this IPv6 address, Host B returns an NA message. The NA message contains the IPv6 address of Host B. 3. Host A learns that the I

Seite 12

9 Figure 5 PMTU discovery process The PMTU discovery process is: 1. The source host compares its MTU with the packet to be sent, performs necess

Seite 13 - Proxy ARP Configuration

2 • Prevent the virtual IP address of a VRRP group from being used by a host The master router of a VRRP group can periodically send gratuitous ARP

Seite 14 - Enabling Proxy ARP

10 • RFC 1881: IPv6 Address Allocation Management • RFC 1887: An Architecture for IPv6 Unicast Address Allocation • RFC 1981: Path MTU Discovery f

Seite 15

11 Task Remarks Enabling Sending of ICMPv6 Destination Unreachable Messages Optional Configuring Basic IPv6 Functions Enabling IPv6 Enable IPv6 bef

Seite 16 - Isolation

12 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Configure the i

Seite 17

13 vulnerability, you can configure the temporary address function that enables the system to generate and use temporary IPv6 addresses with differen

Seite 18

14 NOTE: • After an IPv6 site-local address or a global unicast address is configured for an interface, a link-local address is generated automati

Seite 19 - Step2 Configure the device

15 CAUTION: You can use either method above to configure a static neighbor entry for a VLAN interface. • After a static neighbor entry is configure

Seite 20

16 Parameters Description M flag This field determines whether hosts use the stateful autoconfiguration to acquire IPv6 addresses. If the M flag is s

Seite 21

17 To do… Use the command… Remarks Configure the hop limit ipv6 nd hop-limit value Optional 64 by default. Enter interface view interface interface

Seite 22 - Connected Network

18 NOTE: • The maximum interval for sending RA messages should be less than or equal to the router lifetime in RAmessages. • The values of the NS

Seite 23

19 Figure 6 Application environment of ND proxy Because Host A considers that Host B is on the same network, it directly sends an NS message to obt

Seite 24 - Configuring TCP Attributes

3 NOTE: • You can enable periodic sending of gratuitous ARP packets on a maximum of 1024 interfaces. • Periodic sending of gratuitous ARP packets

Seite 25 - Introduction

20 To do… Use the command… Remarks Configure the interface MTU ipv6 mtu mtu-size Optional The default value varies by interface. Configuring a Sta

Seite 26

21 received, the finwait timer is reset upon receipt of the last non-FIN packet and the connection is terminated after the finwait timer expires. •

Seite 27 - Optimization

22 Configuring ICMPv6 Packet Sending Configuring the Maximum ICMPv6 Error Packets Sent in an Interval If too many ICMPv6 error packets are sent withi

Seite 28

23 • If a received IPv6 packet’s destination IP address is not a local address and its hop limit is 1, the device sends an ICMPv6 Hop Limit Exceeded

Seite 29 - Adjacency Table Overview

24 Displaying and Maintaining IPv6 Basics Configuration To do… Use the command… Remarks Display the IPv6 FIB entries display ipv6 fib [ ipv6-addr

Seite 30

25 IPv6 Configuration Example Network requirements • The host, device and router are directly connected through GigabitEthernet interfaces. Configu

Seite 31

26 3. Configure the host Enable IPv6 for the host to obtain an IPv6 address automatically through IPv6 ND. [Device] display ipv6 neighbors interface

Seite 32

27 OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 6 InMcastNotMembers: 25747

Seite 33 - DHCP Overview

28 OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 79 InMcastNotMembers: 65 Ou

Seite 34 - DHCP Address Allocation

29 InMcastPkts: 28 InMcastNotMembers: 0 OutMcastPkts: 7 InAddrErrors: 0 InD

Seite 35 - DHCP Message Format

1 Proxy ARP Configuration This chapter includes these sections: • Proxy ARP Overview • Enabling Proxy ARP • Displaying and Maintaining Proxy ARP • Pr

Seite 36 - DHCP Options

i Table of Contents FTP Configuration·················································································································

Seite 37 - Self-Defined Options

1 FTP Configuration This chapter includes these sections: • FTP Overview • Configuring the FTP Client • Configuring the FTP Server • Displaying and M

Seite 38 - 1. Normal padding format

2 Table 1 Configuration when the device serves as the FTP client Device Configuration Remarks Device (FTP client) Use the ftp command to establish t

Seite 39 - Option 184

3 Establishing an FTP Connection To access an FTP server, an FTP client must establish a connection with the FTP server. Two ways are available to es

Seite 40

4 Follow these steps to establish an IPv6 FTP connection: To do… Use the command… Remarks Log in to the remote FTP server directly in user view ftp

Seite 41 - DHCP Server Configuration

5 4. Use the lcd command to display the local working directory of the FTP client. You can upload the file under this directory, or save the download

Seite 42

6 Maintaining and Debugging an FTP Connection After a device serving as the FTP client has established a connection with the FTP server (For how to

Seite 43 - Configuration Task List

7 Figure 2 Network diagram for FTPing a startup file from an FTP server InternetDevice10.1.1.1/16FTP serverFTP client10.2.1.1/16PC Configuration pro

Seite 44 - Address Pool

8 CAUTION: The startup file used for the next startup must be saved under the root directory of the storage medium (Fora device that has been partit

Seite 45

9 Configuring Authentication and Authorization on the FTP Server To allow an FTP user to access certain directories on the FTP server, you need to cr

Seite 46

2 A main advantage of proxy ARP is that it is added on a single device without disturbing routing tables of other devices in the network. Proxy ARP a

Seite 47

10 Figure 3 Upgrading using the FTP server InternetDeviceFTP serverPCFTP client1.2.1.1/161.1.1.1/16 Configuration procedure Step1 Configure Device

Seite 48

11 ftp> put newest.app ftp> bye NOTE: • You can take the same steps to upgrade configuration file with FTP. When upgrading the configuratio

Seite 49 - Service

1 TFTP Configuration This chapter includes these sections: • TFTP Overview • Configuring the TFTP Client • Displaying and Maintaining the TFTP Client

Seite 50 - Enabling DHCP

2 Table 3 Configuration when the device serves as the TFTP client Device Configuration Remarks Device (TFTP client) • Configure the IP address and

Seite 51

3 To do… Use the command… Remarks Enter system view system-view — Use an ACL to control the device’s access to TFTP servers tftp-server [ ipv6 ] ac

Seite 52

4 Figure 5 Smooth upgrading using the TFTP client function Configuration procedure Step1 Configure the PC (TFTP Server), the configuration procedu

Seite 53

i Table of Contents Tunneling Configuration ··········································································································

Seite 54

1 Tunneling Configuration NOTE: The term router in this document refers to a network routing device running a routing protocol. This chapter incl

Seite 55

2 processing, but may also lead to upper-layer application failures. Furthermore, they will still face the problem that IPv4 addresses will eventuall

Seite 56

3 2. After determining according to the routing table that the packet needs to be forwarded through the tunnel, the device at the source end of the t

Seite 57

3 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable local pro

Seite 58 - Analysis

4 Tunnel mode Source/destination IP address of the tunnel IP address of the tunnel interface 6to4 tunnel The source IP address is a manually configu

Seite 59 - Fundamentals

5 6to4 network to an IPv6 network, a 6to4 router must be used as a gateway to forward packets to the IPv6 network. Such a router is called 6to4 relay

Seite 60

6 IPv4 over IPv4 Tunnel Introduction to IPv4 over IPv4 tunneling protocol The IPv4 over IPv4 tunneling protocol (RFC 1853) is developed for IP data p

Seite 61

7 Figure 5 Principle of IPv4/IPv6 over IPv6 tunnel The original data in Figure 5 refers to an IPv4 or IPv6 packet. Encapsulation and de-encapsulati

Seite 62 - Agent Interface

8 Figure 6 Network diagram for 6PE When an ISP wants to utilize the existing IPv4/MPLS network to provide IPv6 traffic switching capability through

Seite 63 - Functions

9 Configuring a Tunnel Interface Follow these steps to configure a tunnel interface: To do… Use the command… Remarks Enter system view system-view

Seite 64

10 To do… Use the command… Remarks Enable IPv6 ipv6 Required By default, the IPv6 packet forwarding function is disabled. Enter tunnel interface vi

Seite 65 - Enabling Offline Detection

11 Configuration Example Network requirements As shown in Figure 7, two IPv6 networks are connected to an IPv4 network through Device A and Device B

Seite 66 - Option 82

12 [DeviceB] ipv6 # Configure an IPv4 address for GigabitEthernet 1/2. [DeviceB] interface gigabitethernet 1/2 [DeviceB-GigabitEthernet1/2] ip addres

Seite 67

13 Joined group address(es): FF02::1:FF00:0 FF02::1:FF00:1 FF02::1:FFA8:3201 FF02::2 FF02::1 MTU is 1480 bytes ND reachable

Seite 68

4 Figure 6 Network diagram for proxy ARP Configuration procedure # Specify the IP address of interface GigabitEthernet 0/2. <Device> system-v

Seite 69

14 To do… Use the command… Remarks Enter system view system-view — Enable the IPv6 packet forwarding function ipv6 Required By default, the IPv6 pa

Seite 70

15 Figure 8 Network diagram for an automatic IPv4-compatible IPv6 tunnel Configuration procedure NOTE: Make sure that Device A and Device B are

Seite 71 - DHCP Client Configuration

16 Tunnel0 current state :UP Line protocol current state :UP IPv6 is enabled, link-local address is FE80::C0A8:6401 Global unicast address(es):

Seite 72

17 --- ::192.168.50.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max =

Seite 73 - 3. Verification

18 NOTE: • No destination address needs to be configured for a 6to4 tunnel because the destination address can automatically be obtained from the

Seite 74

19 • Configuration on Device A. # Enable IPv6. <DeviceA> system-view [DeviceA] ipv6 # Configure an IPv4 address for GigabitEthernet 1/2. [Devi

Seite 75 - BOOTP Client Configuration

20 Pinging 2002:501:101:1::2 from 2002:201:101:1::2 with 32 bytes of data: Reply from 2002:501:101:1::2: bytes=32 time=13ms Reply from 2002:501:101:

Seite 76 - IP Address Through BOOTP

21 # Configure an IPv4 address for GigabitEthernet 1/2. [DeviceA] interface gigabitethernet 1/2 [DeviceA-GigabitEthernet1/2] ip address 2.1.1.1 255.2

Seite 77

22 Reply from 2001::2: bytes=32 time=13ms Reply from 2001::2: bytes=32 time=1ms Reply from 2001::2: bytes=32 time=1ms Reply from 2001::2: bytes=32 t

Seite 78

23 To do… Use the command… Remarks Configure a source address or interface for the tunnel source { ip-address | interface-type interface-number } R

Seite 79

5 Figure 7 Network diagram for local proxy ARP between isolated ports NOTE: • The switch in this diagram is a distributed device. • In this con

Seite 80 - DHCPv6 Overview

24 [Device-GigabitEthernet1/2] ipv6 address 3001::1/64 [Device-GigabitEthernet1/2] quit [Device] interface gigabitethernet 1/1 [Device-GigabitEtherne

Seite 81 - Address/Prefix Lease Renewal

25 does not use Neighbor Discovery uses Router Discovery routing preference 1 EUI-64 embedded IPv4 address: 2.1.1.2 router link-layer addre

Seite 82

26 To do… Use the command… Remarks Enter tunnel interface view interface tunnel number — Configure an IPv4 address for the tunnel interface ip addr

Seite 83 - Operation

27 Figure 12 Network diagram for an IPv4 over IPv4 tunnel GE1/110.1.1.1/24GE2/02.1.1.1/24GE1/110.1.3.1/24Device AIPv4 netwokIPv4Group 1Tunnel110.1.2.

Seite 84 - DHCPv6 Server Configuration

28 [DeviceB-GigabitEthernet1/1] quit # Configure an IPv4 address for GigabitEthernet 2/1 (the physical interface of the tunnel). [DeviceB] interface

Seite 85 - Prefix Selection Process

29 The Maximum Transmit Unit is 64000 Internet Address is 10.1.2.2/24 Primary Encapsulation is TUNNEL, service-loopback-group ID not set Tunnel sourc

Seite 86 - Creating a Prefix Pool

30 To do… Use the command… Remarks Configure an IPv4 address for the tunnel interface ip address ip-address { mask | mask-length } [ sub ] Required

Seite 87

31 Configuration procedure NOTE: Make sure that Device A and Device B are reachable to each other. • Configuration on Device A # Enable IPv6. &l

Seite 88

32 # Create the interface tunnel 2. [DeviceB] interface tunnel 2 # Configure an IPv4 address for the interface tunnel 2. [DeviceB-Tunnel2] ip address

Seite 89 - Configuration considerations

33 Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0 Last 300 second

Seite 90

6 The ping operation from Host A to Host B is unsuccessful because they are isolated at Layer 2 and Layer 3. # Configure local proxy ARP to allow com

Seite 91

34 To do… Use the command… Remarks or site-local address ipv6 address ipv6-address/prefix-length eui-64 ipv6 address auto link-local interface Con

Seite 92

35 Configuration Example Network requirements As shown in Figure 14, the two subnets Group 1 and Group 2 running IPv6 are interconnected by using an

Seite 93

36 [DeviceA-Tunnel1] quit # Configure a static route from Device A through the interface tunnel 1 to Group 2. [DeviceA] ipv6 route-static 2002:3:: 64

Seite 94

37 MTU is 1460 bytes ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for a

Seite 95

38 Displaying and Maintaining Tunneling Configuration To do… Use the command… Remarks Display information about tunnel interfaces display interface

Seite 96

i Table of Contents NAT-PT Configuration··············································································································

Seite 97 - DHCPv6 Client Configuration

1 NAT-PT Configuration This chapter includes these sections: • NAT-PT Overview • Configuring NAT-PT • Displaying and Maintaining NAT-PT • NAT-PT Conf

Seite 98

2 Dynamic mappings are dynamically generated for translation between IPv6 and IPv4 addresses. Different from static mappings, dynamic mappings are no

Seite 99

3 translated into a valid IPv4 address, the destination IPv6 address is translated into that IPv4 address. Otherwise, the translation fails. 4. For

Seite 100

4 Currently, NAT-PT supports Internet Control Message Protocol (ICMP), Domain Name System (DNS), File Transfer Protocol (FTP), and other protocols th

Seite 101 - IPv6 Basics Configuration

7 [Switch-vlan5] quit [Switch] isolate-user-vlan 5 secondary 2 3 Step2 Configure the device # Specify the IP address of GigabitEthernet 0/2. <Dev

Seite 102

5 • Enable IPv6 on the device. For more information, see IPv6 Basics Configuration in the IP Services Volume. • Configure an IPv4 or IPv6 address a

Seite 103 - IPv6 Addresses

6 To do… Use the command… Remarks Enter system view system-view — Configure a static IPv4/IPv6 address mapping on the IPv6 side natpt v6bound stati

Seite 104 - Multicast addresses

7 To do… Use the command… Remarks Associate an IPv6 ACL with an address pool: If the source IPv6 address of an IPv6 packet matches the specified IP

Seite 105

8 • If the destination IPv6 address in a packet sent from an IPv6 host to an IPv4 host matches a static IPv4/IPv6 address mapping, the destination I

Seite 106 - Address resolution

9 Follow these steps to set the Traffic Class field in packets after NAT-PT translation: To do… Use the command… Remarks Enter system view system-v

Seite 107 - Duplicate address detection

10 To do… Use the command… Remarks Display NAT-PT statistics information display natpt statistics Available in any view Clear all NAT-PT statistics

Seite 108 - IPv6 PMTU Discovery

11 [DeviceB] natpt v6bound dynamic prefix 3001:: address-group 1 Step2 Configure Device A on the IPv4 side # Configure a static route to subnet 9.0.

Seite 109 - Protocols and Standards

12 # Configure interface addresses and enable NAT-PT on the interfaces. <DeviceB> system-view [DeviceB] ipv6 [DeviceB] interface gigabitethern

Seite 110

13 1 2001::0002 ^ 0 9.0.0.5 ^ 0 ICMP 3001::0005 ^ 0 8.0.0.2

Seite 111 - Addresses

1 ARP Configuration This chapter includes these sections: • ARP Overview • Configuring ARP • Displaying and Maintaining ARP • ARP Configuration Examp

Seite 112 - Manual configuration

i Table of Contents IP Performance Optimization Configuration ························································································

Seite 113

1 IP Performance Optimization Configuration This chapter includes these sections: • IP Performance Optimization Overview • Enabling Reception and For

Seite 114 - Configuring IPv6 ND

2 Enabling Reception of Directed Broadcasts to a Directly Connected Network If a device is enabled to receive directed broadcasts, the device will de

Seite 115 - Learned

3 GigabitEthernet 0/1 (IP address 1.1.1.2/24) of Device A. Configure a static route to the host on Device B. It is required that directed broadcasts

Seite 116

4 Configuring TCP Attributes Configuring TCP MSS for the Interface The Max Segment Size (MSS) option informs the receiver of the largest segment that

Seite 117

5 • finwait timer: When a TCP connection is changed into FIN_WAIT_2 state, the finwait timer is started. If no FIN packet is received within the tim

Seite 118 - Enabling ND Proxy

6 If the device received an IP packet with a timeout error, it drops the packet and sends an ICMP timeout packet to the source. The device will send

Seite 119 - Configuring PMTU Discovery

7 Configuration Procedure Follow these steps to enable sending of ICMP error packets: To do… Use the command… Remarks Enter system view system-vie

Seite 120

i Table of Contents Adjacency Table Configuration ····································································································

Seite 121

1 Adjacency Table Configuration This chapter includes these sections: • Adjacency Table Overview • Displaying and Maintaining Adjacency Table NOTE

Seite 122 - Interval

2 • Sender hardware address: This field specifies the hardware address of the device sending the message. • Sender protocol address: This field spe

Seite 123 - Messages

2 • Link media type: Related to the link layer protocol used by the outgoing interface. P2P indicates point-to-point, such as the point-to-point pro

Seite 124 - Configuration

i Table of Contents DHCP Overview·····················································································································

Seite 125 - IPv6 Configuration Example

ii DHCP Relay Agent Configuration·····················································································································

Seite 126 - Verification

1 DHCP Overview This chapter includes these sections: • Introduction to DHCP • DHCP Address Allocation • DHCP Message Format • DHCP Options • Protoco

Seite 127

2 DHCP Address Allocation Allocation Mechanisms DHCP supports three mechanisms for IP address allocation. • Manual allocation: The network administr

Seite 128

3 IP Address Lease Extension The IP address dynamically allocated by a DHCP server to a client has a lease. When the lease expires, the IP address i

Seite 129 - Solution

4 • siaddr: Server IP address, from which the client obtained configuration parameters. • giaddr: IP address of the first relay agent a request mes

Seite 130

5 • Option 33: Static route option. It specifies a list of classful static routes (the destination addresses in these static routes are classful) th

Seite 131 - FTP Configuration

6 Figure 6 Format of the value field of the ACS parameter sub-option • The value field of the service provider identifier sub-option contains the

Seite 132 - Configuring the FTP Client

7 Figure 8 Sub-option 1 in normal padding format Sub-option type (0x01)0715Length (0x06) Circuit ID type (0x00) Length (0x04)23 31VLAN ID Interface n

Seite 133

3 ARP Table After obtaining the MAC address of a host, the device puts the IP-to-MAC mapping into its own ARP table. This mapping is used for forward

Seite 134

8 • Sub-option 4: Failover route that specifies the destination IP address and the called number that a Session Initiation Protocol (SIP) user uses

Seite 135

1 DHCP Server Configuration This chapter includes these sections: • Introduction to DHCP Server • DHCP Server Configuration Task List • Displaying an

Seite 136 - Network requirements

2 After establishment of the inheritance relationship, the new configuration at the higher level (father) of the tree will be: • Inherited if the lo

Seite 137 - Configuration procedure

3 If no IP address is assignable, the server does not respond. NOTE: Option 50 is the requested IP address field in DHCP-DISCOVER messages. It is

Seite 138 - Configuring the FTP Server

4 Creating a DHCP Address Pool When creating a DHCP address pool, specify it as a common address pool or an extended address pool. Follow these steps

Seite 139

5 To do… Use the command… Remarks or client ID Specify the client ID static-bind client-identifier client-identifier Neither is bound statically b

Seite 140

6 NOTE: • In common address pool view, using the network command repeatedly overwrites the previous configuration. • After you exclude IP address

Seite 141 - System Volume

7 Configuring a Domain Name Suffix for the Client You can specify a domain name suffix in each DHCP address pool on the DHCP server to provide the cl

Seite 142 - TFTP Configuration

8 • h (hybrid)-node: A combination of peer-to-peer first and broadcast second. The h-node client unicasts the destination name to the WINS server, i

Seite 143 - Configuring the TFTP Client

9 To do… Use the command… Remarks Specify gateways gateway-list ip-address&<1-8> Required No gateway is specified by default. Configuri

Seite 144

4 To do… Use the command… Remarks Configure a long static ARP entry arp static ip-address mac-address vlan-id interface-type interface-number [ vp

Seite 145

10 Follow these steps to configure a self-defined DHCP option in the DHCP address pool: To do… Use the command… Remarks Enter system view system-v

Seite 146

11 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable the D

Seite 147 - Tunneling Configuration

12 Configuring the DHCP Server Security Functions This configuration is necessary to secure DHCP services on the DHCP server. Configuration Prerequis

Seite 148 - IPv6 over IPv4 Tunnel

13 To do… Use the command… Remarks Configure a timeout waiting for ping responses dhcp server ping timeout milliseconds Optional 500 ms by default

Seite 149

14 To do… Use the command… Remarks Enter system view system-view — Enable the DHCP server to send trap messages to the network management server

Seite 150

15 The DHCP server configuration for the two types is the same. Static IP Address Assignment Configuration Example Network requirements As shown in F

Seite 151 - 5. ISATAP tunnel

16 [DeviceA-dhcp-pool-1] gateway-list 10.1.1.126 3. Verification After the preceding configuration is complete, Device B can obtain IP address 10.1.

Seite 152 - IPv4/IPv6 over IPv6 Tunnel

17 # Enable DHCP. <DeviceA> system-view [DeviceA] dhcp enable # Exclude IP addresses from dynamic allocation (addresses of the DNS server, WINS

Seite 153 - 6PE Overview

18 Figure 13 Network diagram for self-defined option configuration Configuration procedure 1. Specify IP address for interface GigabitEthernet 0/1

Seite 154

1 DHCP Relay Agent Configuration This chapter includes these sections: • Introduction to DHCP Relay Agent • DHCP Relay Agent Configuration Task List

Seite 155 - Configuration Procedure

5 NOTE: • The setting can take effect only after you save it and restart the system. • When the maximum number of ARP entries the system supports

Seite 156 - IP Routing Volume

2 No matter whether a relay agent exists or not, the DHCP server and client interact with each other in a similar way (see section Dynamic IP Address

Seite 157 - Configuration Example

3 If a client’s requesting message has… Handling strategy Padding format The DHCP relay agent will… user-defined Forward the message after replacing

Seite 158 - Configuration verification

4 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Enable the DHC

Seite 159

5 • The group-id argument in the dhcp relay server-select command is configured by using the dhcp relay server-group command. Configuring the DHCP

Seite 160

6 With this feature, the DHCP relay agent uses the IP address of a client and the MAC address of the DHCP relay interface to periodically send a DHCP

Seite 161

7 relieves DHCP starvation attack that comprises DHCP packets encapsulated with different source MAC addresses. To prevent a DHCP starvation attack t

Seite 162

8 Configuring the DHCP Relay Agent to Send DHCP-RELEASE Messages This task allows you to release a client’s IP address manually on the DHCP relay age

Seite 163 - Configuring a 6to4 Tunnel

9 To do… Use the command… Remarks Configure the code type for the circuit ID sub-option dhcp relay information circuit-id format-type { ascii | hex

Seite 164

10 To do… Use the command… Remarks Display information about the refreshing interval for entries of dynamic IP-to-MAC bindings display dhcp relay s

Seite 165

11 # Enable the DHCP relay agent on GigabitEthernet 0/1. [DeviceA] interface gigabitethernet 0/1 [DeviceA-GigabitEthernet0/1] dhcp select relay # Cor

Seite 166

6 To do… Use the command… Remarks Enter system view system-view — Enable the ARP entry check arp check enable Optional By default, ARP entry check

Seite 167

12 NOTE: You need to perform corresponding configurations on the DHCP server to make the Option 82 configurations function normally. Troubleshooti

Seite 168 - Configuring an ISATAP Tunnel

1 DHCP Client Configuration This chapter includes these sections: • Introduction to DHCP Client • Enabling the DHCP Client on an Interface • Displayi

Seite 169

2 Displaying and Maintaining the DHCP Client To do… Use the command… Remarks Display specified configuration information display dhcp client [ ver

Seite 170

3 # Enable DHCP. [DeviceA] dhcp enable # Exclude an IP address from automatic allocation. [DeviceA] dhcp server forbidden-ip 10.1.1.2 # Configure DHC

Seite 171

4 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0

Seite 172

1 BOOTP Client Configuration This chapter includes these sections: • Introduction to BOOTP Client • Configuring an Interface to Dynamically Obtain a

Seite 173

2 A BOOTP client dynamically obtains an IP address from a BOOTP server in the following steps: 1. The BOOTP client broadcasts a BOOTP request, whic

Seite 174

3 Configuration procedure The following describes only the configuration on Device B serving as a client. # Configure GigabitEthernet 0/1 to dynamica

Seite 175

i Table of Contents DHCPv6 Overview···················································································································

Seite 177

7 NOTE: Clearing ARP entries from the ARP table may cause communication failures. ARP Configuration Example Network requirements As shown in Figur

Seite 178

1 DHCPv6 Overview This chapter includes these sections: • Introduction to DHCPv6 • DHCPv6 Address/Prefix Assignment • Address/Prefix Lease Renewal •

Seite 179

2 1. The DHCPv6 client sends out a Solicit message that contains a Rapid Commit option, requesting that rapid assignment of address/prefix and other

Seite 180

3 Figure 3 Using the Renew message for address/prefix lease renewal As shown in Figure 3, at T1, the DHCPv6 client unicasts a Renew message to the

Seite 181

4 With an IPv6 address obtained through stateless address autoconfiguration, a device automatically enables the stateless DHCPv6 function after it re

Seite 182

1 DHCPv6 Server Configuration This chapter includes these sections: • Introduction to the DHCPv6 Server • DHCPv6 Server Configuration Task List • Con

Seite 183

2 Basic Concepts DHCPv6 multicast address The multicast address FF05::1:3 identifies all DHCPv6 servers on the site-local network. The multicast addr

Seite 184

3 static prefixes configured for specific clients, or have a prefix pool referenced for dynamic assignment from the specific prefix range. A DHCPv6 s

Seite 185

4 To do… Use the command… Remarks Create a prefix pool ipv6 dhcp prefix-pool prefix-pool-number prefix prefix/prefix-len assign-len assign-len Requ

Seite 186 - NAT-PT Configuration

5 Applying the Address Pool to an Interface After an address pool is applied to an interface, a prefix and other configuration parameters can be sele

Seite 187 - Implementing NAT-PT

6 DHCPv6 Server Configuration Example Network requirements As shown in Figure 8, the device serves as a DHCPv6 server, and assigns the IPv6 prefix, D

Seite 188 - NAT-PT Limitations

8 # View information about static ARP entries. [Device] display arp static Type: S-Static D-Dynamic A-Authorized IP Address

Seite 189 - Configuring NAT-PT

7 [Device-Vlan-interface2] ipv6 address 1::1/64 [Device-Vlan-interface2] quit # Create and configure prefix pool 1. [Device] ipv6 dhcp prefix-pool 1

Seite 190 - Configuring a NAT-PT Prefix

8 2:2::3 Domain name: aaa.com SIP server address: 2:2::4 SIP server domain name: bbb.com # Display the information of prefix pool 1

Seite 191

1 DHCPv6 Relay Agent Configuration This chapter includes these sections: • Introduction to the DHCPv6 Relay Agent • Configuring the DHCPv6 Relay Agen

Seite 192

2 Operation of DHCPv6 Relay Agent Figure 10 Operating process of a DHCPv6 relay agent Take the process of rapid assignment involving two messages a

Seite 193 - natpt-prefix

3 Configuration Procedure Follow these steps to configure the DHCPv6 relay agent: To do… Use the command… Remarks Enter system view system-view — E

Seite 194

4 DHCPv6 Relay Agent Configuration Example Network requirements As shown in Figure 11, the network address prefix of DHCPv6 clients is 1::/64, and th

Seite 195

5 Verification # After completing the above configurations, display DHCPv6 server address information on Router A. [Device-GigabitEthernet0/1] displa

Seite 196

1 DHCPv6 Client Configuration This chapter includes these sections: • Introduction to the DHCPv6 Client • Configuring the DHCPv6 Client • Displaying

Seite 197

2 NOTE: • For more information about the ipv6 address auto command, see IPv6 Basics Commands in the IP Services Volume. • It is not recommended t

Seite 198 - Troubleshooting NAT-PT

3 # Enable the router to send RA messages. [Router-GigabitEthernet0/1] undo ipv6 nd ra halt Step2 Configure the device # Enable the IPv6 packet forw

Kommentare zu diesen Handbüchern

Keine Kommentare