取消
显示结果 
搜索替代 
您的意思是: 
cancel
3701
查看次数
0
有帮助
3
回复

cisco 3650做DHCP加mac地址绑定

zhangtf
Level 1
Level 1
cisco 3650做了DHCP加mac地址绑定,如何只让做了mac地址绑定的能拿到dhcp分配的地址?没有配置mac地址绑定的拿不到DHCP分配的地址?公司现在所有端口插上都能自动获取地址接入网络,需求就是只让做了mac地址绑定的设备能DHCP拿到地址,不明设备插上端口也拿不到地址进入网络。
3 条回复3

你好,如果说对应MAC获取IP地址的话,可以参考如下配置:
Example: Configuring Manual Bindings
The following example shows how to create a manual binding for a client named example1.abc.com that sends a client identifier in the DHCP packet. The MAC address of the client is 02c7.f800.0422 and the IP address of the client is 172.16.2.254.
ip dhcp pool pool1
host 172.16.2.254
client-identifier 01b7.0813.8811.66
client-name example1
The following example shows how to create a manual binding for a client named example2.abc.com that does not send a client identifier in the DHCP packet. The MAC address of the client is 02c7.f800.0422 and the IP address of the client is 172.16.2.253.
ip dhcp pool pool2
host 172.16.2.253
hardware-address 02c7.f800.0422 ethernet
client-name example1
Because attributes are inherited, the two preceding configurations are equivalent to the following:
ip dhcp pool pool1
host 172.16.2.254 255.255.255.0
hardware-address 02c7.f800.0422 ieee802
client-name client1
default-router 172.16.2.100 172.16.2.101
domain-name abc.com
dns-server 172.16.1.102 172.16.2.102
netbios-name-server 172.16.1.103 172.16.2.103
netbios-node-type h-node
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/xe-3se/3650/dhcp-xe-3se-3650-book/config-dhcp-server.html#GUID-C1DE449D-3B56-4832-AE3F-7F82E94E5510
如果需要做DHCP的安全话,可以参考DHCP Snooping
3.    ip dhcp snooping
4. ip dhcp snooping vlan vlan-range
5. ip dhcp snooping information option
6. ip dhcp snooping information option allow-untrusted
7. interface interface-id
8. ip dhcp snooping vlan vlan information option format-type circuit-id [override] string ASCII-string
9. ip dhcp snooping trust
10. ip dhcp snooping limit rate rate
11. exit
12. ip dhcp snooping verify mac-address
13. end
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/3se/security/configuration_guide/b_sec_3se_3650_cg/b_sec_3se_3650_cg_chapter_01100.html
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Rps-Cheers | If it solves your problem, please mark as answer. Thanks !

18653465190
Spotlight
Spotlight
3650交换机应该支持绑定三元素,MAC地址绑定肯定是要手动绑定,这就解决二层接入的问题。

wuhao0015
Spotlight
Spotlight
二楼正解~~!
入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接