Configuring the DHCP Server for Huawei Firewall

This chapter we will tell you the DHCP Server function and how to configure the DHCP Server for Huawei symantec firewall. DHCP Server Dynamic Host Configuration Protocol (DHCP) is a technology for dynamically managing and configuring users in a centralized way. The DHCP technology realizes dynamic assignment and centralized management of user addresses and configuration information ena!ling enterprises to rapidly and dynamically assign addresses to users and manage these addresses. This manner avoids comple" manual configuration and adapts to networ# changes rapidly. DHCP uses the Client$Server (C$S) mode. The client applies for configurations. %n response the server replies with corresponding configurations (including the %P address default gateway D&S server and '%&S server) to dynamically assign %P addresses and configure and manage other networ# parameters in a centralized manner. DHCP delivers the following functions: Device Serving as a DHCP Server The device supports the configuration of the DHCP server on the interface. %t assigns %P addresses and networ# parameters to clients on different networ# segments or those on cross(networ# segments !y interwor#ing with the DHCP relay. Policies for IP Address Allocation )ccording to the different re*uirements the DHCP server provides the following %P address allocation policies+ l Static address allocation ) few specific hosts (such as the PCs of high access permissions and the servers of various types) re*uire fi"ed %P addresses. To address their re*uirements you can configure the static address allocation on these hosts. )fter that when a client with a designated ,)C address applies for an %P address the server assigns a !ound fi"ed %P address to the client !ased on its ,)C address. This allows the specific hosts to use their fi"ed %P addresses. l Dynamic address allocation The DHCP server chooses %P addresses from the availa!le %P address range and assigns them to the client in lease mode. )fter the lease e"pires the clients need to re(apply for %P addresses. The -infinite- lease is a special case in dynamic address allocation which allows the clients to occupy their assigned %P addresses for a long time. .efore the DHCP server dynamically allocates %P addresses it proactively e"cludes
1

certain %P addresses including those that have !een assigned reserved or configured as static addresses. This avoids that the same address is assigned to different clients and eliminates %P address collision. Assignable IP address range /ou can define the start and end %P addresses of the allocata!le %P address range. The start %P address and end %P address can !e on different networ# segments. l 'hen the DHCP server and DHCP client are on the same networ# segment the DHCP server assigns its interface %P addresses on the same networ# segment to the DHCP client. l 'hen the DHCP server and DHCP client are on the different networ# segments the DHCP server assigns the %P addresses that are on the same networ# segment as the interface %P address of the DHCP relay to the DHCP client. .y default the allocata!le %P address range is on the networ# segment where the interface %P address resides after the DHCP server is ena!led on the interface. Network para eter service accessible to the client The DHCP server !y using the 0ption fields in the DHCP pac#ets can centrally specify the client networ# parameters including+ l Client domain name and D&S server address. l 'indows %nternet &aming Server ('%&S). l 1gress gateway address. Device Serving as a DHCP !ela" ) DHCP client sends the re*uest pac#ets to apply for a dynamic %P address in !roadcast mode2 therefore the DHCP service is applica!le only to the application scenarios where the DHCP server and the DHCP clients reside on the same networ# segment. %t is uneconomical to deploy a DHCP server on each networ# segment to dynamically configure the host. Therefore it is unnecessary to configure each segment with a DHCP server to perform dynamic host configuration . The DHCP relay is developed as a solution to this pro!lem. The DHCP relay communicates with the DHCP servers on other su!nets and o!tains the valid %P addresses. %n this manner DHCP clients on multiple networ#s can share a single DHCP server. This is more cost(effective and facilitates centralized management. The device supports the configuration of the DHCP relay on the interface. The DHCP relay interface forwards DHCP pac#ets transparently !etween the DHCP client and DHCP server. The interface %P address must !e on the same networ# segment as the %P address of the DHCP client. Device Serving as a DHCP Client
2

The device supports the ena!ling of the DHCP client on the interface. %t uses DHCP to o!tain %P addresses and networ# segments from the DHCP server simplifying configurations and centralized management.

Configuring the DHCP Service #nabling DHCP Service 1na!ling the DHCP service ena!les other related DHCP functions. )lthough you can perform related DHCP configurations in the case of the DHCP service disa!led the configurations do not ta#e effect. Step $ Choose Network 3 DHCP Server 3 Settings. Step % Select the #nable chec# !o" corresponding to DHCP Service in Configure DHCP &asic Para eter. Step ' Clic# Appl". %f the 0peration succeeded dialog !o" is displayed the function is successfully ena!led. ((((#nd Creating a DHCP Server The DHCP server not only provides clients on the same networ# segment with dynamically assigned %P addresses statically assigned %P addresses designated D&S servers gateways and '%&S servers !ut also colla!orates with the DHCP relay to assign %P addresses and networ# parameters to client across networ# segments. The DHCP server and DHCP relay services cannot coe"ist on the same interface. Step $ Choose Network 3 DHCP Server 3 Settings. Step % Clic# Add in DHCP Service Infor ation )ist. Step ' 1nter or select parameters listed in *able $. Step + Clic# Appl". %f the operation succeeds DHCP Service Infor ation )ist is displayed on the page and new configuration items are added to the list. 4epeat the previous operations to configure the DHCP server function on multiple interfaces.

((((#nd Creating a DHCP !ela" The DHCP client can communicate with DHCP servers on other networ# segments through a DHCP relay and finally o!tains the %P address. %n so doing DHCP clients on multiple networ# segments can use the same DHCP server which saves costs and facilitates centralized management. .efore configuring the DHCP relay on an interface ma#e sure that the DHCP server is already configured and the DHCP server and DHCP relay interface are routa!le. %n addition the %P address of the DHCP relay interface should !e on the same networ# segment as the %P address assigned !y the DHCP server to the client and the default gateway of the DHCP client is the %P address of the DHCP relay interface. The DHCP server and DHCP relay services cannot coe"ist on the same interface. Step $ Choose Network 3 DHCP Server 3 Settings. Step % Clic# Add in DHCP Service Infor ation )ist. Step ' 1nter or select parameters listed in *able %. Step + Clic# Appl". %f the operation succeeds DHCP Service Infor ation )ist is displayed on the page and new configuration items are added to the list. 4epeat the previous operations to configure the DHCP relay function on multiple interfaces. *able % Parameters of the DHCP relay

((((#nd

,odif"ing the DHCP Service Step $ Choose Network 3 DHCP Server 3 Settings. Step % %n DHCP Service Infor ation )ist clic# in the line where the DHCP service to !e modified resides. Step ' 1nter or select parameters listed in *able $ and *able %. Interface Na e cannot !e modified. Step + Clic# Appl". %f the operation succeeds DHCP Service Infor ation )ist is displayed. ((((#nd Deleting the DHCP Service Step $ Choose Network 3 DHCP Server 3 Setting. Step % Select the chec# !o"es of multiple entries or the chec# !o" in the ta!le header for selecting all. Step ' Clic# Delete. %f the operation succeeds DHCP Service Infor ation )ist is displayed on the page and entries that are 5ust selected are not displayed in the list. ((((#nd

,ore related: Huawei &e"t 6eneraion 7irewall Comprehensively 4esolve 1nterprise Configuration for Huawei Symantec 7irewall How to 1na!le DST for 8S69:::$;::: Huawei 7irewall 8S6;<::+ Configuring System Parameters ,ore Huawei products and !eviews "ou can visit: http+$$www.huanetwor#.com$!log

Huanetwor#.com is a world leading Huawei networ#ing products distri!utor we wholesale original new Huawei networ#ing e*uipments including Huawei switches Huawei routers Huaweisymantec security products Huawei %)D Huawei S7P and other Huawei networ#ing products. 0ur customers include telecom operators Huawei resellers %SP and system integrators. 4ight now most of our sales are contri!uted !y regular customers 0ur we!site+ http+$$www.huanetwor#.com Telephone+ =>;9(<:;:?@A: 1mail+ salesBhuanetwor#.com )ddress+ 9<$7 Cuc#y Plaza <?;(<9? Coc#hart 4oad 'anchai Hong#ong

10