|
собрали стенд, конфиги минимальные.
DHCP_SERVER 192.168.255.2 <--> gi0/1 192.168.255.1 cisco_3560 192.168.9.1 gi0/24 <---> 192.168.9.224 25_port dlink_3526 1_port <----> Client (win vista sp1)
-----------------------------------------------------------
cisco_3560
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname test_sw
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$mfCg$7bUgDwymMq6CBjgCDy9a60
enable password ------
!
username admin privilege 15 secret 5 $1$drT1$4VT9sw4TSNtwuE.mh29Nf1
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface GigabitEthernet0/1
description DHCP_SERVER
switchport access vlan 111
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/24
description Downlink
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,3
switchport mode trunk
switchport nonegotiate
no cdp enable
spanning-tree link-type point-to-point
!
!
interface Vlan1
ip address 192.168.9.1 255.255.255.0
!
interface Vlan111
ip address 192.168.255.1 255.255.255.0
no ip redirects
no ip proxy-arp
!
ip routing
ip classless
ip http server
!
------------------------------------------------------------------
dlink_3526
Boot PROM Version : Build 5.00.009
Firmware Version : Build 5.01.B52
MAC Address : 00-11-95-86-72-47
после резет система
create iproute default 192.168.9.1
config ipif System ipaddress 192.168.9.224/24 vlan default state enable
config dhcp_relay add ipif System 192.168.255.2
config dhcp_relay option_82 state enable
enable dhcp_relay
enable dhcp_local_relay
config port_security ports 1-26 admin_state disable lock_address_mode DeleteOnReset
enable address_binding dhcp_snoop
config address_binding ip_mac ports 1-24 state enable
config address_binding dhcp_snoop max_entry ports all limit 3
config filter dhcp_server ports all state disable
config filter dhcp_server ports 1-24 state enable
create vlan Clients tag 3
config vlan default delete 1-24
config vlan Clients add untagged 1-24
config vlan Clients add tagged 25
save
-----------------------------------------------------------
DHCP_CONFIG
Internet Systems Consortium DHCP Server 4.1.0
собран из исходников на fedora 10
------------------------------------------------------------------------------------------------------------------
#/etc/dhcpd.conf
lease-file-name "/var/lib/dhcpd/dhcpd.leases";
one-lease-per-client true;
ddns-update-style none;
default-lease-time 259200;
max-lease-time 259200;
not authoritative;
#authoritative;
log-facility local5;
if exists agent.circuit-id
{
log ( info, concat( "Lease for ", binary-to-ascii (10, 8, ".", leased-address), " is connected to interface ",
binary-to-ascii (10, 8, "/", suffix ( option agent.circuit-id, 2)), " (add 1 to port number!), VLAN ",
binary-to-ascii (10, 16, "", substring( option agent.circuit-id, 2, 2)), " on switch ",
binary-to-ascii(16, 8, ":", substring( option agent.remote-id, 2, 6))
,"IP" ,binary-to-ascii(10, 8, ".", packet(24, 4)) ));
log ( info, concat( "Lease for ", binary-to-ascii (10, 8, ".", leased-address),
" raw option-82 info is CID: ", binary-to-ascii (10, 8, ".", option agent.circuit-id), " AID: ",
binary-to-ascii(16, 8, ".", option agent.remote-id)));
}
option ms-classless-static-routes code 249 = array of integer 8;
option rfc3442-classless-static-routes code 121 = array of integer 8;
option domain-name-servers 192.168.0.3, 192.168.0.4;
include "/etc/dhcp_networks.conf";
------------------------------------------------------------------------------------------------------------------------------
#/etc/dhcp_networks.conf
shared-network Test {
subnet 192.168.9.0 netmask 255.255.255.0 {}
subnet 192.168.255.0 netmask 255.255.255.0 {}
subnet 10.1.0.0 netmask 255.255.0.0 {
option routers 10.1.0.2;
}
subnet 10.50.0.0 netmask 255.255.0.0 {
option routers 10.50.0.2;
## кусок ms-classless routes его не привожу т.к. эту сеть пока не используем
}
include "/etc/master.conf";
}
---------------------------------------------------------------------------------------------------------------
#/etc/master.conf
##With client mac
##class "1@9_224" {match if option agent.remote-id = 0:6:0:11:95:86:72:47 and option agent.circuit-id = 0:4:0:4d:0:1 and pick-first-value (dhcp-client-identifier, harware) = 1:0:02:b3:8d:40:96;}
##pool {range 10.1.1.2; allow members of "1@9_224";}
##Without client mac
class "1@9_224" {match if option agent.remote-id = 0:6:0:11:95:86:72:47 and option agent.circuit-id = 0:4:0:3:0:1;}
pool {range 10.1.1.2; allow members of "1@9_224";}
class "2@9_224" {match if option agent.remote-id = 0:6:0:11:95:86:72:47 and option agent.circuit-id = 0:4:0:3:0:2;}
pool {range 10.50.1.2; allow members of "2@9_224";}
------------------------------------------------------------------------------------------------------------------
Подключаем ноутбук с win vista, по dhcp прекрасно получаем адрес, но бинд на коммутаторе не создается.
Выключение включение соединения не помогает, так же как и дергание патчкорда адрес получаем но бинд не прописывается.
Бинд создается только при последовательности команд от администратора
ipconfig /release
ipconfig /renew
Жду предложения по возможной модификации конфигов оборудования для получения нормальных результатов.
|
Вход
Регистрация
FAQ
Поиск
