h3c msr系列路由器命令手冊v1.02-ip業(yè)務(wù)分冊

2 2arpcheck 2 3arpmax- 4arp 4arptimer 5disy 6disyarpip- 8disyarptimer 9disy - 9 reset 1 1disy - 1 - 1 -arp 2-arp 3 1ARPSnoo配置命 1arp-snoo 1disyarp-snoo..........................................................................................................3-resetarp-snoo.............................................................................................................3- 1 1arpfast-reply 1 1 1 1 1disyarpsource- 2 3 3 3arpanti-attackactive-ack 4 4 4 5 6 6disyarpanti-attacksource- 7 8arpanti-attackvalid-ack 9 9arprate-limit(interface 9arprate-limit(system arpauthorized arpdetection arpdetection arpdetection arpdetection disyarp disyarpdetection resetarpdetection 1 1disymac-d-forwarding 1 1 2 3 4 5MSRMSRMSRMSRarpcheckarpmax-arp-snooarpfast-replydisyarpanti-attackactive-ackenabledisyarparpanti-attackvalid-checkenablearprate-MSRMSRMSRMSRarpdisydisyH3CMSRarpcheckarpcheckenableundoarpcheckenable無ARP表項(xiàng)，否則會(huì)有錯(cuò)誤提示。undoarpcheckenableARP表項(xiàng)的檢查功能，可MACMACARPMACMAC的靜態(tài)ARP表項(xiàng)。<Sysname>system-view[Sysname]arpcheckenablearpmax-learning-numarpmax-learning-num命令用來配置接口允許學(xué)習(xí)動(dòng)態(tài)ARP表項(xiàng)的最大個(gè)數(shù)。undoarpmax-learning-num命令用來恢復(fù)接口允許學(xué)習(xí)動(dòng)態(tài)ARP表項(xiàng)的缺省個(gè)數(shù)。##[Sysname]interfaceethernetarpmax-arpmax-num65536undoarpmax-無<Sysname>system-view[Sysname]arpmax-num65536Info:Pleasesaveconfigurationandrebootsystemtotakearparpstaticip-addressmac-address[vlan-idinterface-typeinterface-number] undoarpip-address -instance-instance-name：實(shí)例。-instance-name用來指定實(shí)例的名稱， ARPARPVLANVLANARPARP表項(xiàng)則重 vlan-idARPVLAN，vlan-idVLAN的IDvlan-idVLAN。VLANVLAN接口必 數(shù)ip-address指定的IP地址屬于同一網(wǎng)段。 如果undo命令中沒有指定 相關(guān)配置可參考命令resetarp和disyarp。[Sysname]arpstatic00e0-fc01-000010ethernetarptimerarptimeragingaging-undoarptimerarptimeragingARP表項(xiàng)的老化時(shí)間。undoarptimeraging命令用來恢復(fù)缺相關(guān)配置可參考命令disyarptimeraging。<Sysname>system-view[Sysname]arptimeraging10disydisyarp[[all|dynamic|static]|vlanvlan-id|interfaceinterface-typeinterface-number][[verbose][|{begin|exclude|include}regular-expression]|count]disyarp[[all|dynamic|static][slotslot-number]|vlanvlan-id|interfaceinterface-typeinterface-number][[verbose][|{begin|exclude|include}regular-expression]|count]disyarp[[all|dynamic|static][chassischassis-numberslotslot-number]|vlanvlan-id|interfaceinterface-typeinterface-number][[verbose][|{begin|exclude|include}regular-expression]|count]all：顯示所有的ARP表項(xiàng)。static：顯示靜態(tài)ARP表項(xiàng)。chassischassis-numberslotslot-number：顯示指定成員設(shè)備上指定單板的ARP表項(xiàng)。chassis-number表示設(shè)備在堆疊中的成員編號，可使用disyirf命令查看。slot-number表示單interfaceinterface-typeinterface-number：顯示指定接口的ARP表項(xiàng)。interface-typeinterface-number用來指定接口的類型和編號。相關(guān)配置可參考命令arpstaticresetarp。<Sysname>IPyarpallverboseType:S-StaticMACVLANIDS[NoD[No1D[No1D表1-1disyarp命令顯示信息描述IPARP表項(xiàng)的IPMACARP表項(xiàng)的MACVLANARP表項(xiàng)類型：動(dòng)態(tài)，用D表示；靜態(tài)，用S表示；，用A表-instance<Sysname>disyarpallcountTotalEntry(ies):4disyarpip-disyarpip-address[verbose][|{begin|exclude|include}regular-expressiondisyarpip-address[slotslot-number][verbose][|{begin|exclude|includedisyarpip-address[chassischassis-numberslotslot-number][verbose][|{beginexclude|include}regular-expressionchassischassis-numberslotslot-number：顯示指定成員設(shè)備上指定單板的ARP表項(xiàng)。chassis-number表示設(shè)備在堆疊中的成員編號，可使用disyirf命令查看。slot-number表示單相關(guān)配置可參考命令arpstatic和resetarp。yarpIPType:S-MACVLANIDAging disyarptimerdisyarptimer無disyarptimeraging命令用來顯示動(dòng)態(tài)ARP表項(xiàng)的老化時(shí)間。相關(guān)配置可參考命令arptimeraging。<Sysname>disyarptimeragingCurrentARPagingtimeis10minute(s)disy -disy - -instance-name[|{begin|exclude|include}regular-|count顯示指定實(shí)例的ARP表項(xiàng)。disyarp -instance命令用來顯示指定 相關(guān)配置可參考命令arpstatic和resetarp。 <Sysname>disy -instanceType:S- IP MAC VLANID 00e0-fc00-0001 Snaturemask-arpundonaturemask-arp無naturemask-arpenableARP請求必須是同一子網(wǎng)網(wǎng)段的限制，即支持自然網(wǎng)段的ARP請求。undonaturemask-arpenable命令用來恢復(fù)缺省情況。resetresetarp{all|dynamic|static|interfaceinterface-typeinterface-numberresetarp{all|dynamic|static|slotslot-number|interfaceinterface-typeinterface-numberresetarp{all|dynamic|static|chassischassis-numberslotslot-number|dynamic：表示清除動(dòng)態(tài)ARP表項(xiàng)。static：表示清除靜態(tài)ARP表項(xiàng)。chassischassis-numberslotslot-number：表示清除指定成員設(shè)備上指定單板的ARP表項(xiàng)。interfaceinterface-typeinterface-number：表示清除指定接口的ARP表項(xiàng)。interface-typeinterface-number用來指定接口的類型和編號。 相關(guān)配置可參考命令arpstatic和disyarp。<Sysname>resetarp免費(fèi)ARPgratuitous-arp-sendingenableundogratuitous-arp-sendingenable無功能。undogratuitous-arp-sendingenable命令用來恢復(fù)缺省情況。gratuitous-arp-learningenableundogratuitous-arp-learningenable無gratuitous-arp-learningenable命令用來使能免費(fèi)ARP報(bào)文的學(xué)習(xí)功能。undogratuitous-arp-learningenable命令用來關(guān)閉免費(fèi)ARP報(bào)文學(xué)習(xí)功能。ARPARPIP地址對應(yīng)ARPIPARP表項(xiàng)，則無論是否開啟本功能，都將更新此ARP表項(xiàng)。disy interface-number用來指定接口的類型和編號。disylocal--arp命令用來顯示本地ARP的狀態(tài)是處于開啟（enabled）還是關(guān)如果指定接口，則顯示指定接口的本地ARP的狀態(tài)；如果不指定接口，則顯示所有接口的本地ARP的狀態(tài)。 <Sysname>disylocal- -arpinterfacevlan-interface2InterfaceVlan-interface2 ARPstatus:disy-dis -arp[interfaceinterface-typeinterface-numberinterfaceinterface-typeInterface-number：顯示指定接口的ARP的狀態(tài)。interface-typeinterface-number用來指定接口的類型和編號。 -arpenable<Sysname>disy -arpinterfaceethernet1/1InterfaceEthernet1/1ARPstatus: -arpenableundolocal- 無 -arpenable命令用來開啟本地ARP功能。undolocal- 來關(guān)閉本地ARP功能。 [Sysname]interfaceethernet 2.1.4-arp-arp 無

[Sysname]interfacevlan-interface2 -arpenable[Sysname]interfaceethernet1/1 -arpenableARP ARPSnoo配置命arp-snooundoarp-snoo無arp-snooenable命令用來使能ARPSnoo功能。undoarp-snooenable命令用<Sysname>system-view[Sysname]arp-snooenable[Sysname]vlan1[Sysname-vlan1]arp-snoodisyarp-snoo[ipip-address|vlanvlan-iddisyarp-snoo命令用來顯示ARPSnoo表項(xiàng)。如果沒有指定參數(shù)，表示顯示所有<Sysname>disyarp-snoovlanIP MAC VLANIDInterface ----Totalentry(ies)onVLAN1:2---表3-1disyarpsnoo命令顯示信息描述IPARPSnoo表項(xiàng)的IP地MACVLANARPSnoo表項(xiàng)所屬的VLANresetarp-snoo[ipip-address|vlanvlan-idSnoo表項(xiàng)。<Sysname>resetarp-snoovlanarpfast-replyarpfast-replyundoarpfast-reply無arpfast-replyenableARP代答功能。undoarpfast-replyenable用來恢復(fù)缺省情況。缺省情況下，關(guān)閉ARP代答功能。<Sysname>system[Sysname]vlan arpsource-suppressionenableundoarpsource-suppressionenable無arpsource-suppressionenable命令用來使能ARP源地址抑制功能。undoarpsource-suppressionenable命令用來恢復(fù)缺省情況。undoarpsource-suppressionlimit命令用來恢復(fù)缺省情況。至5秒后再處理，從而避免了所造成的危害。[Sysname]arpsource-suppressionlimitdisyarpsource-無<Sysname>dis yarpsource-suppressionARPsourcesuppressionisenabledCurrentsuppressionlimit:100Currentcachelength:表5-1disyarpsource-suppression顯示信息描述5秒時(shí)間間隔內(nèi)可以接收到的同源IP，且目的IP地址不能解析的IP報(bào)文的最大數(shù)目Currentcachearpresolving-routeenableundoarpresolving-routeenable無arpresolving-routeenable命令用來啟用ARP防IP報(bào)文功能。undoarpresolving-routeenable命令用來關(guān)閉ARP防IP報(bào)文功能。[Sysname]arpresolving-routearpanti-attackactive-ackenableundoarpanti-attackactive-ackenable無arpanti-attackactive-ackenableARP主動(dòng)確認(rèn)功能。undoarpanti-attackactive-ackenable命令用來恢復(fù)缺省情況。ARP的主動(dòng)確認(rèn)功能主要應(yīng)用于網(wǎng)關(guān)設(shè)備上，防止者仿冒用戶網(wǎng)關(guān)設(shè)備。使能ARP主動(dòng)5ARP報(bào)文；如果沒有收到應(yīng)答報(bào)文，則向之前收到的ARP報(bào)文對應(yīng)的源發(fā)送一個(gè)單播請求，如果在隨[Sysname]arpanti-attackactive-ack源MAC地址固定的ARP檢測配置命arpanti-attacksource-mac{filter|monitorundoarpanti-attacksource-mac[filter|monitorundoarpanti-attacksource-mac命令用來恢復(fù)缺省情況。缺省情況下，關(guān)閉源MAC固定ARP檢測功能。濾；在monitor模式下只進(jìn)行告警，不過濾ARP報(bào)文。[Sysname]arpanti-attacksource-macundoarpanti-attacksource-macaging-arpanti-attacksource-macaging-time命令用來配置源MAC地址固定的ARP檢測表項(xiàng)的老化時(shí)間。undoarpanti-attacksource-macaging-time命令用來恢復(fù)缺省情況。[Sysname]arpanti-attacksource-macaging-timemac-address&<1-n>：MAC地址列表。其中，mac-address表示配置的保護(hù)MAC地址，格式為H-H-H。&<1-n>MAC地址個(gè)數(shù)。n的取值范圍和設(shè)備相關(guān)，請以設(shè)arpanti-attacksource-macexclude-macMACMAC之后，即使該ARP報(bào)文中的MAC地址存在也不會(huì)被檢測過濾。undoarpanti-attacksource-macexclude-mac命令用來取消配置的保護(hù)MAC。undoarpanti-attacksource-mac固定的時(shí)間（5秒）內(nèi)收到源MAC固定的ARP報(bào)文超過該閾值則認(rèn)為存在。undoarpanti-attacksource-macthreshold命令用來恢復(fù)缺省閾值。[Sysname]arpanti-attacksource-macthresholddisyarpanti-attacksource-mac{slotslot-number|interfaceinterface-typeinterface-number}disyarpanti-attacksource-mac{chassischassis-numberslotslot-number|定的ARP檢測表項(xiàng)。chassis-number表示設(shè)備在堆疊中的成員編號，可使用disyirf命令查看。slot-number表示單板的槽位號，取值范圍請以設(shè)備的實(shí)際情況為準(zhǔn)。（分布式堆疊設(shè)備）<Sysname>disyarpanti-attacksource-VLAN2<Sysname>disyarpanti-attacksource-macslotVLAN2<Sysname>disyarpanti-attacksource-macchassis1slot VLAN 2表5-2disyarpanti-attacksource-mac命令顯示信息描述VLANarpanti-attackvalid-checkenableundoarpanti-attackvalid-checkenable無arpanti-attackvalid-checkenableARPMAC一致性檢查功令用來關(guān)閉ARP報(bào)文源MAC一致性檢查功能。[Sysname]arpanti-attackvalid-checkarprate-limit(interfacearprate-limit{disable|rateppsdropundoarprate-ratepps：ARP限速速率，單位為包每秒（pps）。不同型號的設(shè)備支持的取值范圍不同，請以設(shè)ARPARP報(bào)文限速。undoarprate-limitARPARP報(bào)文上送限速功能，限速速率與設(shè)備的型號有關(guān)，請以設(shè)備的實(shí)際情況為[Sysname]interfaceethernet[Sysname-Ethernet1/1]arprate-limitrate50arprate-limit(systemarprate-limit{disable|rateppsdropundoarprate-arprate-limit{disable|rateppsdrop}[slotslot-numberundoarprate-limit[slotslot-numberratepps：ARP限速速率，單位為包每秒（pps）。不同型號的設(shè)備支持的取值范圍不同，請以設(shè)ARPARP報(bào)文限速。undoarprate-limitARP報(bào)文ARP報(bào)文上送限速功能，限速速率與設(shè)備的型號有關(guān)，請以設(shè)備的實(shí)際情況為[Sysname]arprate-limitrate505.7ARP配置命arpauthorizedenableundoarpauthorizedenable無用來關(guān)閉接口下的ARP功能。使能接口下的ARP功能后，會(huì)啟動(dòng)接口下ARP表項(xiàng)的老化探測功能，并該接口學(xué)習(xí)并允許該接口學(xué)習(xí)動(dòng)態(tài)ARP表項(xiàng)。[Sysname]interfaceethernetarpauthorizedtime-outundoarpauthorizedtime-time-out命令用來恢復(fù)缺省情況。[Sysname]interfaceethernetarpdetectionarpdetectionenableundoarpdetectionenable無undoarpdetectionenableARPDetection功能。缺省情況下，關(guān)閉ARPDetection功能。[Sysname]vlan1[Sysname-Vlan1]arpdetectionarpdetectionarpdetectionmode{dhcp-snoo|dot1x|static-bindundoarpdetectionmode{dhcp-snoo|dot1x|static-bindarpdetectionmodeARPDetection檢查模式。undoarpdetectionmode命令用來取消指定的ARPDetection檢查模式。[Sysname]arpdetectionmodedhcp-snoo[Sysname]arpdetectionmodedot1xundoarpdetectionstatic-bind[ip-addressarpdetectionstatic-bindIPMAC的靜態(tài)綁定表項(xiàng)。undoarpdetectionstatic-bind命令用來刪除已經(jīng)配置的IP和MAC的靜態(tài)綁定表項(xiàng)。對于源IP存在綁定關(guān)系但是MAC地址不符的ARP報(bào)文，設(shè)備認(rèn)為是報(bào)文進(jìn)行丟棄處理；對arpdetectionarpdetectiontrustundoarpdetectiontrust無端口為ARP非信任端口。[Sysname]interfaceethernetarpdetectionarpdetectionvalidate{dst-mac|ip|src-mac}undoarpdetectionvalidate[dst-mac|ip|src-mac]的目的MAC地址一致。全0、全1、不一致的報(bào)是無效的，無效的報(bào)文需要被丟棄。ARPIPIPARPIP地址。arpdetectionvalidateARPMAC地址、IP地址的有效性檢查。使能有效性檢查時(shí)可以指定某一種檢查方式也可以配置成多種檢查方式的組合。undoarp[Sysname]arpdetectionvalidatedst-macsrc-macdisyarpdisyarp無相關(guān)配置可參考arpdetectionenable。<Sysname>disyarpARPdetectionisenabledinthefollowing1,2,4-表5-3disyarpdetection命令顯示信息描述ARPdetectionisenabledinthefollowingdisyarpdetectioninterfaceinterface-typeinterface-number：顯示指定接口的統(tǒng)計(jì)信息。interface-typeinterface-number用來指定接口類型和編號。disyarpdetectionstatistics命令用來顯示ARPDetection功能報(bào)文檢查的丟棄計(jì)數(shù)的統(tǒng)計(jì)信息。按端口顯示用戶檢查，報(bào)文有效性檢查和ARP報(bào)文上送限速的統(tǒng)計(jì)情況，只顯示丟棄<Sysname>disyarpdetectionstatisticsState:U-UntrustedT-TrustedARPpacketsdroppedbyARPinspect 0 00 00 0表5-4 ARP報(bào)文源和目的IPARP報(bào)文源MACARP報(bào)文結(jié)合用戶檢查（DHCPSnoo、802.1X、靜態(tài)綁定）不resetarpdetectioninterfaceinterface-typeinterface-number：表示清除指定接口下的統(tǒng)計(jì)信息。interface-typeinterface-number用來指定接口類型和編號。resetarpdetectionstatisticsARPDetection的統(tǒng)計(jì)信息。不指定接口時(shí)，清除所有的ARPDetection統(tǒng)計(jì)信息。<Sysname>resetarpdetection無相關(guān)配置可參考命令mac-d-forwardingnetwork-port。<Sysname>disymac- d-forwardinginterfaceNetworkPort: UserPort: 表6-1disy NetworkUserdisy <Sysname>disymac- d-forwardingvlan1VLAN1 表6-2disymac-d-forwardingvlan命令顯示信息描述VLAN網(wǎng)關(guān)IPVLAN網(wǎng)關(guān)IPMACServerIP 就需要指定缺省網(wǎng)關(guān)。undomac- d-forwarding命令用來關(guān)閉MFF功能。 如果配置的是自動(dòng)方式，則需要保證DHCPSnoo的正常運(yùn)行；如果配置的是手工方式，則需要保證ARPSnoo的正常運(yùn)行。 的網(wǎng)絡(luò)（VLAN）IPDHCP報(bào)文中的Option字段解析獲取。[Sysname]vlan1 mac-d-forwardinggatewayprobeundomac-d-forwardinggatewayprobe無mac-d-forwardinggatewayprobe命令用來使能對MFF的網(wǎng)關(guān)進(jìn)行定時(shí)探測，以便感網(wǎng)關(guān)的定時(shí)探測功能。undomac-d-forwardinggatewayprobe命令用來恢復(fù)缺省情況。需要注意的是，在配置 d-forwardinggatewayprobe命令之前需要使 [Sysname]vlan1 mac-d-forwardingnetwork-portundomac-d-forwardingnetwork-port無 命令用來配置端口為網(wǎng)絡(luò)端口。undomac-d-forwardingnetwork-port命令用于恢復(fù)缺省情況。 VLANMFF功能時(shí)，如果用戶想取消網(wǎng)絡(luò)端口的配置，則需要先將網(wǎng)絡(luò)端口從鏈路聚[Sysname]interfaceethernet undo mac-d-forwardingserver命令用來配置網(wǎng)絡(luò)中部署的服務(wù)器的IP地址。undomac-d-forwardingserverIP地址，不指定參數(shù)表示刪除所有的服務(wù)器IP地址。IPVRRPIPIP地址為服務(wù) [Sysname]vlan1 1 1 1 2dhcp 3dhcpserverapplyip- 3dhcpselectserverglobal- 4dhcpserver 5 5dhcpserverip- 6dhcpserver 7dhcpserver 7dhcpserverrelayinformation 8dhcpupdatearp(forDHCP 9disydhcp 9disydhcpserver disydhcpserver- disydhcpserverforbidden- disydhcpserverip-in- disydhcpserver disydhcpserver - networkip network resetdhcp resetdhcpserverip-in- resetdhcpserver - tftp- - 1 1 1 2dhcprelayinformationcircuit-id 3dhcprelayinformation 3 4 5 6dhcprelayinformation 7dhcprelayrelease 8dhcprelaysecurity 9dhcprelaysecurityrefresh dhcprelaysecurity dhcprelayserver- dhcpselect dhcpupdatearp(forDHCP disydhcp disydhcprelay disydhcprelay disydhcprelaysecurity disydhcprelaysecurity disydhcprelayserver- disydhcprelay resetdhcprelay 1 1disy 1ipaddressdhcp- 3 1 1dhcp-snoo...................................................................................................................4-dhcp-snooinformationcircuit-idformat- 1dhcp-snooinformationcircuit-id 2dhcp-snooinformation 3dhcp-snooinformation 4 5dhcp-snooinformationremote-id 5dhcp-snooinformation 6dhcp-snoo 7disydhcp-snoo......................................................................................................4-disydhcp-snoo 9disydhcp-snoopacket disydhcp-snoo resetdhcp-snoo.......................................................................................................4-resetdhcp-snoopacket 1 1disy 1ipaddressbootp- 2H3CMSR系列路由器令支持情況說MSRMSRMSRMSRdhcpupdatedhcprelayaddress-dhcprelaysecurityinformationformatH3CMSR務(wù)器的subaddress地址池配置不能在串口、MP-group接口和Loopback接口上進(jìn)行。bims-serveripip-address[portport-number]sharekey相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree共享密鑰為aabbcc。[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]bims-serveripport80sharekeyundobootfile-bootfile-name命令用來配置DHCP地址池為DHCP客戶端分配的啟動(dòng)文件名。undobootfile-name命令用來刪除DHCP地址池為DHCP客戶端分配的啟動(dòng)文件名。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-pooldhcpdhcpenable無缺省情況下，DHCP服務(wù)處于狀態(tài)。[Sysname]dhcpdhcpserverapplyip-dhcpserverapplyip-poolpool-undodhcpserverapplyip-pool[pool-namedhcpserverapplyip-pool命令用來配置接口擴(kuò)展模式的地址池。undodhcpserverapplyip-pool命令用來取消接口的擴(kuò)展模式地址池。池中選擇IP地址分配給客戶端。 用的擴(kuò)展模式地址池中選擇IP地址分配給客戶端。 相關(guān)配置可參考命令dhcpserverip-pool。 dhcpselectserverglobal-pool[subaddressundodhcpselectserverglobal-pool地址分配給客戶端。如果接口有多個(gè)從IP地址，則從第一個(gè)從IP地址開始依次匹配。dhcpselectserverglobal-pool命令用來配置接口工作在DHCP服務(wù)器模式，即當(dāng)接口收到DHCPDHCPDHCP服務(wù)器的地址池中分配地址。undodhcpselectserverglobal-poolsubaddress命令用來取消對從地址分配的支持。 [Sysname]interfaceethernet dhcpserverdhcpserverdetectundodhcpserverdetect無偽DHCP服務(wù)器檢測功能。DHCP服務(wù)器。 務(wù)器。管理員需要從日志信息中查找偽DHCP服務(wù)器。 <Sysname>system-view[Sysname]dhcpserverdetectundodhcpserverforbidden-iplow-ip-address[high-ip-address表示只有一個(gè)IP地址，即low-ip-address。serverforbidden-ip命令用來取消DHCP地址池中不參與自動(dòng)分配的IP地址的配置。 dhcpserverforbidden-ipIP地址配置為不參與自動(dòng)分配的地 undodhcpserverforbidden-ipIP地址的配置時(shí)，指定的地的配置，不能單獨(dú)取消其中某個(gè)IP地址的配置。 相關(guān)配置可參考命令disydhcpserverforbidden-ip、dhcpserverip-pool，network[Sysname]dhcpserverforbidden-ipdhcpserverip-dhcpserverip-poolpool-name[extendedundodhcpserverip-poolpool-地址池，則直接進(jìn)入該地址池視圖。undodhcpserverip-pool命令用來刪除指定的地址池。缺省情況下，沒有創(chuàng)建DHCP地址池。<Sysname>system-view[Sysname]dhcpserverip-pool0dhcpserverdhcpserverpacketsundodhcpserverserverpackets命令用來恢復(fù)缺省情況。[Sysname]dhcpserverpacketsdhcpserverdhcpservertimeoutundodhcpserver操作。servertimeout命令用來恢復(fù)缺省情況。[Sysname]dhcpservertimeoutdhcpserverrelayinformationdhcpserverrelayinformationenableundodhcpserverrelayinformationenable無dhcpserverrelayinformationenableDHCPOption82。undodhcpserverrelayinformationenable命令用來配置DHCP服務(wù)器忽略O(shè)ption82。[Sysname]undodhcpserverrelayinformationdhcpupdatearp(forDHCPdhcpupdatearpundodhcpupdatearp無dhcpupdatearp命令用來配置DHCP服務(wù)器支持ARP功能。undodhcpupdatearp命令[Sysname]interfaceethernet1/1[Sysname-Ethernet1/1]dhcpupdatearpdisydhcpserverdisydhcpserver{all|ipip-addressdisydhcpserver 相關(guān)配置可參考命令resetdhcpserver。<Sysname>disydhcpserver DiscovertimeApr252007Apr252007---total2entry--表1-1disydhcpserver命令顯示信息描述發(fā)生的IP地disydhcpserverdisydhcpserverexpired{all|ipip-address|pool[pool-name]可用地址分配完后，這類租約超期的地址將被分配給DHCP客戶端。<Sysname>dis ydhcpserverexpiredallGlobalpool:IPaddress Leaseexpiration Hardwareaddress 3030-3066-2e65-3230-Apr252007 ---total1entry--表1-2disydhcpserverexpired命令顯示信息描述GlobalIP租約超期的IP租約超期的客戶端ID或MACLeasedisydhcpserver-disydhcp -無disydhcpserver-ip命令用來顯示DHCP地址池的可用地址信息，即尚未分配的IP地址<Sysname>disydhcp -IPRangefrom todisydhcpserverforbidden-disydhcpserverforbidden-無<Sysname>disydhcpserverforbidden-ipIPRangefrom toIPRangefrom toPoolname: 表1-3disydhcpserverforbidden-ip命令顯示信息描述dhcpserverforbidden-ip命令配置的不參與自動(dòng)分配的IP地址，所有地址池都不可以分配這些IP地址Pool址，只有當(dāng)前擴(kuò)展模式的地址池不可以分配這些IP地址disydhcpserverip-in-disydhcpserverip-in-use{all|ipip-address|pool[pool-name]disydhcpserverip-in-use命令用來顯示DHCP地址池中的地址綁定信息。相關(guān)配置可參考命令resetdhcpserverip-in-use。<Sysname>disydhcpserverip-in-useallGlobalpool:IPaddress Hardware

Lease NOT ---total1entry--表1-4disydhcpserverip-in-use命令顯示信息描述GlobalIP綁定的IP綁定的客戶端IDMACLeaseNOTUsedUnlimited地址綁定的類型，包括ManualAuto:OFFERED和 Manual disydhcpserverdisydhcpserver無disydhcpserverstatistics命令用來顯示DHCP服務(wù)器的統(tǒng)計(jì)信息。相關(guān)配置可參考命令resetdhcpserverstatistics。<Sysname>disydhcpserverstatisticsGlobalPool:Pool1100BOOTP530200BOOTP63300Bad0表1-5disydhcpserverstatistics命令顯示信息描述GlobalPool自動(dòng)綁定的IP手工綁定的IP租約超期的IPBOOTPBOOTPBaddisydhcpserverdisydhcpservertree{all|pool[pool-name]<Sysname>disydhcpservertreeallGlobalpool:Poolname:networkmaskSiblingnode:1option2ip-addressexpired10Poolname:static-bindip-addressmaskstatic-bindmac-address00e0-00fc-0001PrevSiblingnode:0expiredExtendedPoolname:networkiprangenetworkmaskexpired00表1-6disydhcpservertree命令顯示信息描述GlobalPoolstatic-bindip-addressmask靜態(tài)綁定的IPMACChildnode：此節(jié)點(diǎn)的子節(jié)點(diǎn)（子網(wǎng)）Parentnode：此節(jié)點(diǎn)的父節(jié)點(diǎn)（自然網(wǎng)段）Siblingnode：此節(jié)點(diǎn)的下一個(gè)兄弟節(jié)點(diǎn)（同一自然網(wǎng)段的其PrevSiblingnodeExtendednetworkip擴(kuò)展模式地址池可分配的IPnetwork擴(kuò)展模式地址池分配的IPundodns-list{ip-address|all令用來刪除DHCP地址池為DHCP客戶端分配的DNS服務(wù)器地址。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-pool-

- -

-缺省情況下，沒有配置DHCP地址池為DHCP客戶端分配的后綴。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree。 [Sysname]dhcpserverip-pool0 expired{dayday[hourhour[minuteminute]]|unlimitedundohourhour：指定租約過期的小時(shí)數(shù)，hour取值范圍為0～23。unlimited：有效期限為無限長（實(shí)際上系統(tǒng)限定約為136年）。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree。[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]expiredday1hour2minuteforbidden-undoforbidden-ip{ip-address&<1-8>|all每個(gè)IP地址之間用空格分隔。 只有當(dāng)前擴(kuò)展模式的地址池不能分配這些IP地址，其他地址池仍然可以分配這些IP地址。 #[Sysname]dhcpserverip-pool0undogateway-list{ip-address|allgateway-listDHCPDHCP客戶端分配的網(wǎng)關(guān)地址。undogateway-相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-poolundonbns-list{ip-address|all[Sysname]dhcpserverip-poolnetbios-type{b-node|h-node|m-node|p-nodeundonetbios-netbios-typeDHCPDHCPNetBIOS節(jié)點(diǎn)類型。undonetbios-type命令用來刪除DHCP地址池為DHCP客戶端分配的NetBIOS節(jié)點(diǎn)類型。[Sysname]dhcpserverip-poolnetworknetwork-address[mask-length|maskmaskundonetworkDHCPIP地址范圍。undonetwork命令用來刪除動(dòng)態(tài)分配的IP地址范圍。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree#[Sysname]dhcpserverip-poolnetworkipnetworkiprangemin-addressmax-undonetworkip 相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-pool0[Sysname-dhcp-pool-0]networkiprangenetworknetworkmaskundonetwork用來刪除動(dòng)態(tài)分配的IP地址掩碼。 IP[Sysname]dhcpserverip-pool0extended[Sysname-dhcp-pool-0]networkmaskoptioncode{asciiascii-string|hexhex-string&<1-16>|ip-addressip-address&<1-8>undooption池的DHCP自定義選項(xiàng)。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]option100hex11resetdhcpresetdhcpserver{all|ipip-addressresetdhcpserver命令用來清除DHCP地址的統(tǒng)計(jì)信息。相關(guān)配置可參考命令disydhcpserver。#清除全部地址統(tǒng)計(jì)信息<Sysname>resetdhcp resetdhcpserverip-in-resetdhcpserverip-in-use{all|ipip-address|pool[pool-name]相關(guān)配置可參考命令disydhcpserverip-in-use。<Sysname>resetdhcpserverip-in-useipresetdhcpserverresetdhcpserver無相關(guān)配置可參考命令disydhcpserverstatistics。<Sysname>resetdhcpserverstatic-bind-static-bind-identifier-undostatic-bind-

制數(shù)。例如：aabb-cccc-dd為有效的ID，aabb-c-ddddaabb-cc-dddd為無效的ID。static-bind-identifier命令用來配置DHCP地址池中靜態(tài)綁定的客戶端ID。undostatic-bind-identifier命令用來刪除DHCP地址池中靜態(tài)綁定的客戶端ID。 態(tài)綁定的客戶端ID和IP地址。 IDIP disydhcpservertree和disydhcp #[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]static-bindip-addressmask[Sysname-dhcp-pool-0]static-bind -identifieraaaa-bbbbstatic-bindip-addressip-address[mask-length|maskmaskundostatic-bindip-static-bindip-addressDHCPIP地址。undostatic-bindip-address命令用來刪除DHCP地址池中靜態(tài)綁定的IP地址。 命令必須與static-bind 或static-bind-identifier命令配合使用，分別配置靜態(tài)綁定的IP地址和MAC地址或客戶端ID。 客戶端將無法正常獲取到IP地址。 相關(guān)配置可參考命令dhcpserverip-pool、static-bind-identifier、static-bindmac-address和disydhcpservertree。[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]static-bindip-addressmask[Sysname-dhcp-pool-0]static-bindmac-address0000-e03f-0305mac-address命令用來刪除DHCP地址池中靜態(tài)綁定的MAC地址。 綁定的MAC地址和IP地址。 和disydhcpservertree[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]static-bindip-addressmask[Sysname-dhcp-pool-0]static-bindmac-address0000-e03f-0305tftp- -tftp-server-name-undotftp-server-

-name命令用來配置DHCP地址池為DHCP客戶端分配的TFTP服務(wù)器名。undotftp-server -name命令用來刪除DHCP地址池為DHCP客戶端分配的TFTP服務(wù)器相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-pool -nametftp-serverip-tftp-serverip-addressDHCPDHCPTFTP服務(wù)器地址。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree[Sysname]dhcpserverip-poolvoice-config{as-ipip-address|fail-overip-addressdialer-string|ncp-ipip-addressvoice-vlanvlan-id{disable|enable}undovoice-config[as-ip|fail-over|ncp-ip|voice-vlan disable：指定VLAN處于狀態(tài)，即DHCP客戶端不會(huì)將所指定的VLANID作為語 voice-config命令用來配置DHCP地址池為DHCP客戶端分配的Option184內(nèi)容。undovoice-configDHCPDHCP客戶端分配的Option184內(nèi)容。需要注意的是，在配置其它參數(shù)前必須先配置ncp-ip，否則其它參數(shù)不生效。相關(guān)配置可參考命令dhcpserverip-pool和disydhcpservertree。叫字符串為99*。[Sysname]dhcpserverip-pool[Sysname-dhcp-pool-0]voice-configncp-ip[Sysname-dhcp-pool-0]voice-configas-ip[Sysname-dhcp-pool-0]voice-configvoice-vlan3enabledhcprelayaddress-check{disable|enabledhcprelayaddress-checkDHCP中繼的地址匹配檢查功能。缺省情況下，DHCP中繼的地址匹配檢查功能。項(xiàng)，則該主機(jī)將不能通過DHCP中繼外部網(wǎng)絡(luò)。 [Sysname]interfaceethernet dhcprelayinformationcircuit-idformat-type{ascii|hexundodhcprelayinformationcircuit-id