Filter
Top Products
DES-7200 Configuration Guide Chapter 10 Dynamic ARP Inspection Configuration
10-7
If the convergence switch or core switch is connected with other PCs and there may
be a private DHCP server, DHCP Snooping shall also be enabled.
10.5.4 Configuration Steps
z Configure Switch A
Step 1: Configure the VLAN to which the PC-connecting port belongs.
DES-7200#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)#interface range gigabitEthernet 0/1-2
DES-7200(config-if-range)#switchport access vlan 2
Step 2: Enable DHCP Snooping.
DES-7200(config-if-range)#exit
DES-7200(config)#ip dhcp snooping
Step 3: Enable DAI on the corresponding VLAN.
DES-7200(config)#ip arp inspection vlan 2
Step 4: Configure the uplink port as the trusted port of DHCP Snooping
DES-7200(config)#interface gigabitEthernet 0/3
DES-7200(config-if-GigabitEthernet 0/3)#ip dhcp snooping trust
Step 5: Configure the uplink port as the trusted port of DAI.
DES-7200(config-if-GigabitEthernet 0/3)#ip arp inspection trust
10.5.5 Verifications
Step 1: Verify whether the configurations are correct. Key points: whether DHCP
Snooping/DAI has been enabled, and whether the trusted port is correct.
DES-7200#show running-config
ip dhcp snooping
!
ip arp inspection vlan 2
!
interface GigabitEthernet 0/1
switchport access vlan 2
!
interface GigabitEthernet 0/2
switchport access vlan 2
!
interface GigabitEthernet 0/3
ip dhcp snooping trust
ip arp inspection trust
Step 2: View DHCP SNOOPING enabling state and the corresponding trusted port.