H3C SecPath F100-M 如何配置DCHP?

Question

ETH0/0为外网口, DHCP要分别给内网口ETH0/0和ETH0/2 提供地址分配服务. 如何实现? 具体命令和步骤?

Answer 1

[H3C]dis cu
#
sysname H3C
#
firewall packet-filter enable
firewall packet-filter default permit
#
insulate
#
firewall statistic system enable
#
radius scheme system
server-type extended
#
domain system
#
local-user admin
password simple admin
service-type telnet
level 3
#
acl number 2001
rule 10 permit
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 192.168.13.1 255.255.255.0
#
interface Ethernet0/1
ip address 192.168.14.1 255.255.255.0
#
interface Ethernet0/2
ip address 192.168.15.1 255.255.255.0
#
interface Ethernet0/3
ip address 192.168.16.1 255.255.255.0
#
interface Ethernet1/0
ip address 222.82.212.34 255.255.255.224
nat outbound 2001
#
interface Ethernet1/1
ip address 192.168.11.1 255.255.255.0
#
interface Ethernet1/2
ip address 192.168.12.1 255.255.255.0
#
interface NULL0
#
firewall zone local
set priority 100
#
firewall zone trust
add interface Ethernet0/0
add interface Ethernet0/1
add interface Ethernet0/2
add interface Ethernet0/3
add interface Ethernet1/1
add interface Ethernet1/2
set priority 85
#
firewall zone untrust
add interface Ethernet1/0
set priority 5
#
firewall zone DMZ
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local DMZ
#
firewall interzone trust untrust
#
firewall interzone trust DMZ
#
firewall interzone DMZ untrust
#
ip route-static 0.0.0.0 0.0.0.0 222.82.212.33 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
[H3C]

Answer 2

SecPath防火墙的主要配置 定义DHCP地址池的属性dhcp server ip-pool test network 192.168.1.0 mask 255.255.255.0 gateway-list 192.168.1.1 dns-list 202.106.0.20 domain-name h3c.com expired day 3在接口上启用DHCPinterface Ethernet0/0 ip address 192.168.1.1 255.255.255.0 dhcp select interface排除DHCP地址池范围 dhcp server forbidden-ip 192.168.1.2 192.168.1.10