HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
39 Creating a DHCP address pool When creating a DHCP address pool, specify it as a common address pool or an extended address pool. A common address pool and an extended address pool are different in address allocation mode configuration. Configurations of other parameters (such as the domain name suffix and DNS server address) for them are the same. To create a DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Create a DHCP address pool and enter its view. dhcp server ip-pool pool-name [ extended ] No DHCP address pool is created by default. Configuring address allocation mode for a common address pool IMPORTANT: You can configure either a static binding or dynamic address allocation fo r a common address pool, bu t not both. You need to specify a subnet for dynamic address allocation. A static binding is a special address pool containing only one IP address. Configuring static address allocation Some DHCP clients, such as a WWW server, need fixed IP addresses. To provide a fixed IP address, you can create a static binding of a client’s MAC address or client ID to an IP address in the DHCP address pool. A static binding is a special address pool containing only one IP address. When the client with that MAC address or client ID requests an IP address, the DHCP server will assign the IP address from the binding to the client. Follow these guidelines when you configure a static binding in a common address pool: • Use the static-bind ip-address command together with static-bind mac-address or static-bind client-identifier to accomplish a static binding configuration. • In a DHCP address pool, if you execute the static-bind mac-address command before the static-bind client-identifier command, the latter will overwrite the former and vice versa. • If you use the static-bind ip-address, static-bind ma c-address, or static-bind client-identifier command repeatedly in the DHCP address pool, the new configuration will overwrite the previous one. • The IP address of the static binding cannot be an interface address of the DHCP server. Otherwise, an IP address conflict may occur and the bound client cannot obtain an IP address correctly. • The ID of the static binding must be identical to the ID displayed by using the display dhcp client verbose command on the client. Otherwise, the client cannot obtain an IP address. • When the device serves as a DHCP client or BOOTP client, you must bind the DHCP client’s ID to an IP address, or bind the BOOTP clients MAC address to an IP address on the DHCP server; otherwise, the DHCP or BOOTP client cannot obtain a static IP address.
40 • If the interfaces on a DHCP client share the same MAC address, you must specify the client ID, rather than MAC address, in a static binding to id entify the requesting interface; otherwise, the client may fail to obtain an IP address. To configure a static binding in a common address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter common address pool view. dhcp server ip-pool pool-name N/A 3. Specify the IP address. static-bind ip-address ip-address [ mask-length | mask mask ] No IP addresses are statically bound by default. 4. Specify the MAC address or client ID. • Specify the MAC address: static-bind mac-address mac-address • Specify the client ID: static-bind client-identifier client-identifier Use at least one command. Neither is bound statically by default. 5. Specify the lease duration for the IP address. expired { day day [ hour hour [ minute minute [ second second ] ] ] | unlimited } Optional. By default, the lease duration of the IP address is unlimited. Configuring dynamic address allocation For dynamic address allocation, you must configure a DHCP address pool. For each address pool, you must specify one and only one address range, and the lease duration. A DHCP address pool can have only one lease duration. To avoid address conflicts, configure the DHCP server to exclude IP addresses used by the gateway or FTP server from dynamic allocation. Follow these guidelines when you configure dynamic address allocation for a common address pool: • In common address pool view, using the network or network ip range command repeatedly overwrites the previous configuration. • After you exclude IP addresses from automatic allocation by using the dhcp server forbidden-ip command, neither a common address pool nor an extended address pool can assign these IP addresses through dynamic address allocation. • Using the dhcp server forbidden-ip command repeatedly can exclude multiple IP address ranges from allocation. To configure dynamic address allocation for a common address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter common address pool view. dhcp server ip-pool pool-name N/A 3. Specify a subnet. network network-address [ mask-length | mask mask ] Not specified by default.
41 Step Command Remarks 4. Specify the IP address range on the subnet for dynamic allocation. network ip range min-address max-address Optional. Not specified by default. 5. Specify the address lease duration. expired { day day [ hour hour [ minute minute ] [ second second ] ] | unlimited } Optional. One day by default. 6. Return to system view. quit N/A 7. Exclude IP addresses from automatic allocation. dhcp server forbidden-ip low-ip-address [ high-ip-address ] Optional. Except IP addresses of the DHCP server interfaces, all addresses in the DHCP address pool are assignable by default. Configuring dynamic address allocation for an extended address pool After the assignable IP address range and the mask are specified, the address pool becomes valid. Extended address pools support dynamic address allocation only. Excluded IP addresses specified with the forbidden-ip command in DHCP address pool view are not assignable in the current extended address pool, but are assignable in other address pools. To configure dynamic address allocation for an extended address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter extended address pool view. dhcp server ip-pool pool-name extended N/A 3. Specify the IP address range. network ip range min-address max-address Not specified by default. 4. Specify the IP address mask. network mask mask Not specified by default. 5. Specify the IP address range for the DHCP clients of a specified vendor. vendor-class-identifier hex-string & ip range min-address max-address Optional. Not configured by default. 6. Specify the address lease duration. expired { day day [ hour hour [ minute minute [ second second ] ] ] | unlimited } Optional. One day by default. 7. Exclude IP addresses from dynamic allocation. forbidden-ip ip-address& Optional. Except IP addresses of the DHCP server interfaces, all addresses in the DHCP address pool are assignable by default.
42 Configuring a domain name suffix for the client You can specify a domain name suffix in each DHCP address pool on the DHCP server to provide the clients with the domain name suffix. With this suffix assigned, the client only needs to input part of a domain name, and the system will add the domain name suffix for name resolution. For more information about DNS, see Configuring IPv4 DNS. To configure a domain name suffix in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify a domain name suffix. domain-name domain-name Not specified by default Configuring DNS servers for the client A DHCP client contacts a Domain Name System (DNS) server to resolve names. You can specify up to eight DNS servers in the DHCP address pool. To configure DNS servers in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify DNS servers. dns-list ip-address & Not specified by default Configuring WINS servers and NetBIOS node type for the client A Microsoft DHCP client using NetBIOS protocol contacts a Windows Internet Naming Service (WINS) server for name resolution. Therefore, the DHCP server should assign a WINS server address when assigning an IP address to the client. You can specify up to eight WINS servers in a DHCP address pool. You must also specify a NetBIOS node type in a DHCP address pool. There are four NetBIOS node types: • b (broadcast) -node —A b-node client sends the destinatio n name in a broadcast message. The destination returns its IP address to the client after receiving the message. • p (peer-to-peer) -node —A p-node client sends the destination name in a unicast message to the WINS server, and the WINS server returns the destination IP address. • m (mixed) -node —An m-node client broadcasts the destinatio n name. If it receives no response, it unicasts the destination name to the WINS server to get the destination IP address. • h (hybrid) -node —An h-node client unicasts the destination name to the WINS server. If it receives no response, it broadcasts the destinatio n name to get the destination IP address.
43 To configure WINS servers and NetBIOS node type in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify WINS server IP addresses. nbns-list ip-address & Optional for b-node. No address is specified by default. 4. Specify the NetBIOS node type. netbios-type { b-node | h-node | m-node | p-node } Not specified by default. Configuring BIMS server information for the client The DHCP server must provides DHCP clients with the branch intelligent management system (BIMS) server IP address, port number, shared key from the DHCP address pool, to enable DHCP clients to perform regular software update and backup by using configuration files obtained from a BIMS server. To configure the BIMS server IP address, port number, and shared key in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify the BIMS server IP address, port number, and shared key. bims-server ip ip-address [ port port-number ] sharekey [ cipher | simple ] key Not specified by default Configuring gateways for the client You can specify up to eight gateways in a DHCP address pool. To configure the gateways in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify gateways. gateway-list ip-address& No gateway is specified by default.
44 Configuring Option 184 parameters for the client with voice service To assign voice calling parameters along with an IP address to DHCP clients with voice service, you must configure Option 184 on the DHCP server. For more information about Option 184, see DHCP ove rview . To configure option 184 parameters in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify the IP address of the primary network calling processor. voice-config ncp-ip ip-address Not specified by default. After you configure this command, the other Option 184 parameters take effect. 4. Specify the IP address of the backup network calling processor. voice-config as-ip ip-address Optional. Not specified by default. 5. Configure the voice VLAN. voice-config voice-vlan vlan-id { disable | enable } Optional. Not configured by default. 6. Specify the failover IP address and dialer string. voice-config fail-over ip-address dialer-string Optional. No failover IP address or dialer string is specified by default. Configuring the TFTP server and bootfile name for the client For the DHCP server to support client auto-configuration, you must specify the IP address or name of a TFTP server and the bootfile name in the DHCP address pool. You do not need to perform any configuration on the DHCP client. The DHCP client uses these parameters to contact the TFTP server and request the configuration file used for system initialization. 1. When a switch starts up without loading any config uration file, the system sets an active interface (such as the interface of the default VLAN ) as the DHCP client to request from the DHCP server for parameters, such as an IP address and name of a TFTP server, and the bootfile name. 2. After getting related parameters, the DHCP clie nt will send a TFTP request to obtain the configuration file from the specified TFTP server for system initialization. If the client cannot get such parameters, it will perform system initiali zation without loading any configuration file. To configure the IP address and name of the TFTP server and the bootfile name in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A
45 Step Command Remarks 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify the IP address or name of the TFTP server. • Specify the TFTP server: tftp-server ip-address ip-address • Specify the name of the TFTP server: tftp-server domain-name domain-name Use either command. Not specified by default. 4. Specify the bootfile name. bootfile-name bootfile-name Not specified by default. Specifying a server’s IP address for the DHCP client Some DHCP clients need to obtain configuration information from a server, such as a TFTP server. You can specify the IP address of that server in each address pool of the DHCP server. The DHCP server sends the server’s IP address to DHCP clients along with other configuration information. To specify the IP address of a server: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A 3. Specify the IP address of a server. next-server ip-address Not specified by default Configuring self-defined DHCP options CAUTION: Be cautious when configuring self-defined DHCP options because such configuration may affect the DHCP operation process. By configuring self-defined DHCP options, you can • Define new DHCP options. New configuration options will come out with DHCP development. To support these new options, you can add them in to the attribute list of the DHCP server. • Define existing DHCP options. Vendors use Option 43 to define options that have no unified definitions in RFC 2132. The self-defined DHCP option enables DHCP clients to obtain vendor-specific information. • Extend existing DHCP options. When the current DHCP options cannot meet the customers’ requirements (for example, you cannot use the dns-list command to configure more than eight DNS server addresses), you can configure a self-defined option for extension. To configure a self-defined DHCP option in the DHCP address pool: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter DHCP address pool view. dhcp server ip-pool pool-name [ extended ] N/A
46 Step Command Remarks 3. Configure a self-defined DHCP option. option code { ascii ascii-string | hex hex-string & | ip-address ip-address& } No DHCP option is configured by default. Table 2 Description of common options O ption Option name Corresponding command Command parameter 3 Router Option gateway-list ip-address 6 Domain Name Server Option dns-list ip-address 15 Domain Name domain-name ascii 44 NetBIOS over TCP/IP Name Server Option nbns-list ip-address 46 NetBIOS over TCP/IP Node Type Option netbios-type hex 66 TFTP server name tftp-server ascii 67 Bootfile name bootfile-name ascii 43 Vendor Specific Information N/A hex Enabling DHCP Enable DHCP before performing other configurations. To enable DHCP: Step Command Remarks 1. Enter system view. system-view N/A 2. Enable DHCP. dhcp enable Disabled by default Enabling the DHCP server on an interface With the DHCP server enabled on an interface, upon receiving a client’s request, the DHCP server will assign an IP address from its address pool to the DHCP client. Configuration guidelines Follow these guidelines when you enable the DHCP server on an interface: • If a DHCP relay agent exists between the DHCP se rver and client, the DHCP server, regardless of whether the subaddress keyword is used, will select an IP addr ess from the address pool containing the primary IP address of the DHCP relay agent’s interface (connected to the client) for a requesting client. • When the DHCP server and client are on the same subnet: { With the keyword subaddress specified, the DHCP server will preferably assign an IP address from an address pool that resides on the same subnet as the primary IP address of the server
47 interface (connecting to the client). If the address pool contains no assignable IP address, the server assigns an IP address from an address pool that resides on the same subnet as the secondary IP addresses of the server interface. If the interface has multiple secondary IP addresses, each address pool is tried in turn for address allocation. If the interface has no secondary IP addresses, the server is unable to assign an IP address to the client. { Without the keyword subaddress specified, the DHCP server can only assign an IP address from the address pool that resides on the same subnet as the primary IP address of the server interface. Configuration procedure To enable the DHCP server on an interface: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter interface view. interface interface-type interface-number N/A 3. Enable the DHCP server on an interface. dhcp select server global-pool [ subaddress ] Optional. Enabled by default. Applying an extended address pool on an interface After you create an extended address pool and apply it on an interface, the DHCP server, upon receiving a clients request on the interface, attempts to assign the client the statically bound IP address first and then an IP address from the specified address pool. If no IP address is available in this address pool, address allocation fails, and the DHCP server will not assign the client any IP address from other address pools. Only an extended address pool can be applied on the interface. The address pool to be referenced must already exist. To apply an extended address pool on an interface: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter interface view. interface interface-type interface-number N/A 3. Apply an extended address pool on the interface. dhcp server apply ip-pool pool-name Optional. By default, the DHCP server has no extended address pool applied on its interface, and assigns an IP address from a common address pool to a requesting client.
48 Configuring the DHCP server security functions Configuration prerequisites Before you configure the DHCP server security functions, complete the following tasks on the DHCP server: • Enable DHCP. • Configure the DHCP address pool. Enabling unauthorized DHCP server detection Unauthorized DHCP servers on a network may assign wrong IP addresses to DHCP clients. With unauthorized DHCP server detection enabled, the DHCP server checks whether a DHCP request contains Option 54 (Server Identifier Option). If yes, the DHCP server records the IP address of each detected DHCP server that assigned an IP address to a requesting DHCP client in the option, and records the receiving interface. The administrator can use this information to check for unauthorized DHCP servers. With the unauthorized DHCP server detection enabled, the switch logs each detected DHCP server once. The administrator can use the log information to find unauthorized DHCP servers. To enable unauthorized DHCP server detection: Step Command Remarks 1. Enter system view. system-view N/A 2. Enable unauthorized DHCP server detection. dhcp server detect Disabled by default Configuring IP address conflict detection With IP address conflict detection enabled, before assigning an IP address, the DHCP server pings that IP address by using ICMP. If the server receives a response within the specified period, it selects and pings another IP address. If it receives no response, the server continues to ping the IP address until the specified number of ping packets are sent. If still no response is received, the server assigns the IP address to the requesting client. (The DHCP client probes the IP address by sending gratuitous ARP packets.) To configure IP address conflict detection: Step Command Remarks 1. Enter system view. system-view N/A 2. Specify the number of ping packets. dhcp server ping packets number Optional. One ping packet by default. The value 0 indicates that no ping operation is performed.