S3610 DHCP-relay支持VPN实例内转发的典型配置

S3610 DHCP-relay支持VPN实例内转发

典型配置

 

一、  组网需求：

客户网络是电力城域网网络，在MPLP/VPN城域网模式下，将S3610交换机作为MCE接入，网关在S3610上，S3610上需要在VPN内启用DHCP-relay。DHCP-relay支持VPN实例分为实例内转发和实例间转发两种。所谓实例内转发，就是DHCP-relay的上行口和下行口都绑在同一个VPN实例中。所谓实例间转发，就是DHCP-relay的上行口和下行口绑在不同的VPN实例中。

本典型配置是实例内转发的典型配置。

二、  组网图：

PCA和PCB分别连接在二层交换机的E1/0/15和E1/0/16口；

S3610作为PC的网关，并做DHCP Relay设备。其下行Interface VLAN 231和上行Interface VLAN 361都绑定VPN实例VPN1。

三、  配置步骤：

1.     S3610 DHCP Relay设备配置

dhcp relay server-group 1 ip 13.16.11.2

dhcp enable

ip vpn-instance 1

 route-distinguisher 100:1

 vpn-target 100:1 export-extcommunity

 vpn-target 200:1 import-extcommunity

vlan 231

vlan 361

interface Bridge-Aggregation36

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

interface Vlan-interface231

 ip binding vpn-instance 1

 ip address 12.13.11.2 255.255.255.0

 dhcp select relay

 dhcp relay server-select 1

interface Vlan-interface361

 ip binding vpn-instance 1

 ip address 13.16.11.1 255.255.255.0

interface Ethernet1/0/10

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 231

interface GigabitEthernet1/1/3

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

 port link-aggregation group 36

interface GigabitEthernet1/1/4

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

 port link-aggregation group 36

2、 S3610 DHCP Snooping设备配置；

dhcp-snooping

vlan 231

interface Ethernet1/0/10

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 231

 dhcp-snooping trust

interface Ethernet1/0/15

 port access vlan 231

interface Ethernet1/0/16

 port access vlan 231

3、DHCP Server设备配置

dhcp enable

vlan 361

dhcp server ip-pool 1

 network 12.13.11.0 mask 255.255.255.0

 gateway-list 12.13.11.2

interface Bridge-Aggregation36

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

interface Vlan-interface361

 ip address 13.16.11.2 255.255.255.0

interface GigabitEthernet1/0/6

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

 port link-aggregation group 36

interface GigabitEthernet1/0/7

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 361

 port link-aggregation group 36

ip route-static 12.13.11.0 255.255.255.0 13.16.11.1

4、验证配置结果

       PCA和PCB都可以正常获取到IP地址。

dhcp-snooping、dhcp-relay、dhcp-server上均可以正确生成表项。

四、  配置关键点：

S3610 R5309及其后版本支持此特性，建议采用最新版本。