How to configure DAI on Huawei S5300 for static IP

By | 28.05.2019

This article describes the case in which you need to configure ARP spoofing protection when clients are configured with static IP addresses. 
On Huawei S5300 DAI feature is per-port based instead of Cisco-like per-vlan. This will greatly simplify implementation when the service is active.

In global configuration mode, enable dhcp-snooping and create a client binding:

dhcp enable
dhcp snooping enable 
dhcp snooping enable vlan 2
user-bind static ip-address mac-address b869-f472-5468 interface GigabitEthernet0/0/3 vlan 2
mac-address static b869-f472-5468 GigabitEthernet0/0/3 vlan 2

On inerface :

interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 2
 arp anti-attack check user-bind enable
 dhcp snooping enable  
Notify of

0 комментариев
Inline Feedbacks
View all comments