华为 USG 6000 防火墙 dhcp 绑定

Posted by Sunday on 2018-12-27

** DHCP绑定

1
2
3
4
5
6
7
8
<HW_STAR>reset ip pool interface Vlanif10 192.168.10.17 //释放已分配出去的ip地址
<HW_STAR>system
[HW_STAR]interface vlan 10
[HW_STAR-Vlanif10]undo dhcp server static-bind ip-address 192.168.10.17
[HW_STAR-Vlanif10]dhcp server static-bind ip-address 192.168.10.17 mac-address 84c7-ea8b-xxxx
[HW_STAR-Vlanif10]quit
[HW_STAR]quit
<HW_STAR>save

** 开启应用识别

1
2
undo engine bypass
display firewall session table verbose destination global 192.168.10.252

** pppoe nat 绑定

1
nat server ppp_24776 protocol tcp global interface Dialer3 24776 inside 192.168.10.20 24776 no-reverse

** 镜像

1
2
3
4
5
#
observing-port GigabitEthernet1/0/4
#
port-mirroring GigabitEthernet1/0/1 both GigabitEthernet1/0/4
port-mirroring GigabitEthernet1/0/3 both GigabitEthernet1/0/4