在对DHCP进行配置的过程中,有一部分是dai启动的内容。那么这里我们针对这方面的内容进行了总结。下面我们就来详细看看DHCP dai启动的具体操作吧。那么DHCP dai启动配置命令具体如下:
- ip subnet-zero
- ip dhcp excluded-address 192.168.1.1
- !
- ip dhcp pool test
- network 192.168.1.0 255.255.255.0
- default-router 192.168.1.1
- dns-server 192.168.1.1
- lease infinite
- !
- ip dhcp snooping vlan 1 (需要DHCP为基础)
- ip dhcp snooping information option allow-untrusted
- ip dhcp snooping database flash:snooping(指定snooping 数据保存位置)
- ip dhcp snooping (启动DHCP snooping)
- ip arp inspection vlan 1 (DHCP dai启动)
- ip arp inspection validate src-mac dst-mac ip (检测项目)
- !
- !
- !
- interface GigabitEthernet1/0/31
- switchport mode access
- ip arp inspection trust (如果设置trust可以改IP,设置untrust不可以改IP,因为DAI检测)
- spanning-tree portfast
- !
- interface GigabitEthernet1/0/32
- !
- nterface GigabitEthernet1/0/44
- !
- interface GigabitEthernet1/0/45
- switchport mode access
- switchport port-security
- switchport port-security violation restrict
- spanning-tree portfast
- ip verify source port-security
- !
- !
- Switch#sh ip arp inspection
以上就是DHCP dai启动的全部设置过程了。