Configure DHCP SNOOPING +IP Source Guard can effectively prevent private IP addresses: 1) For software versions 10.3 and later, the configuration of DHCP SNOOPING +IP Source Guard is as follows: Ruijie(config)#ip dhcp snooping Ruijie(config)#int g0/24 Ruijie(config-if-GigabitEthernet 0/24)#ip dhcp snooping trust //Set up the trusted port of DHCP SNOOPING on the uplink interface Ruijie(config-if-GigabitEthernet 0/24)#exit Ruijie(config)#int rang g0/1 - 23 Ruijie(config-if-range)#ip verify source port-security //Enable the IP Source Guard function on the downlink PC port 2) For software versions earlier than 10.3, the configuration of DHCP SNOOPING +IP Source Guard is as follows: Ruijie(config)#ip dhcp snooping Ruijie(config)#int g0/25 Ruijie(config-if-GigabitEthernet 0/25)#ip dhcp snooping trust //上Set up the trusted port of DHCP SNOOPING on the uplink interface Ruijie(config-if-GigabitEthernet 0/25)#exit Ruijie(config)#int rang f0/1-24 Ruijie(config-if-range)#ip dhcp snooping address-bind //Enable the IP Source Guard function on the downlink PC port |
This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.
More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.
©2000-2023 Ruijie Networks Co,Ltd