解决IP地址冲突的方法--DHCP SNOOPING

<span class=\"tpc_content\"><font size=\"2\">使用的方法是采用DHCP方式为用户分配IP，然后限定这些用户只能使用动态IP的方式，如果改成静态IP的方式则不能连接上网络；也就是使用了DHCP SNOOPING功能。<br/>例子：<br/>version 12.1<br/>no service pad<br/>service timestamps debug uptime<br/>service timestamps log uptime<br/>no service password-encryption<br/>service compress-config<br/>!<br/>hostname C4-2_4506<br/>!<br/>enable password xxxxxxx!<br/>clock timezone GMT 8<br/>ip subnet-zero<br/><br/><br/>no ip domain-lookup<br/>!<br/>ip dhcp snooping vlan 180-181 // 对哪些VLAN 进行限制<br/>ip dhcp snooping<br/>ip arp inspection vlan 180-181<br/>ip arp inspection validate src-mac dst-mac ip<br/><br/><br/><br/><br/>errdisable recovery cause udld<br/>errdisable recovery cause bpduguard<br/>errdisable recovery cause security-violation<br/>errdisable recovery cause channel-misconfig<br/>errdisable recovery cause pagp-flap<br/>errdisable recovery cause dtp-flap<br/>errdisable recovery cause link-flap<br/>errdisable recovery cause l2ptguard<br/>errdisable recovery cause psecure-violation<br/>errdisable recovery cause gbic-invalid<br/>errdisable recovery cause dhcp-rate-limit<br/>errdisable recovery cause unicast-flood<br/>errdisable recovery cause vmps<br/>errdisable recovery cause arp-inspection<br/>errdisable recovery interval 30<br/>spanning-tree extend system-id<br/>!<br/>!<br/><br/>interface GigabitEthernet2/1 // 对该端口接入的用户进行限制，可以下联交换机<br/>ip arp inspection limit rate 100<br/>arp timeout 2<br/>ip dhcp snooping limit rate 100<br/>!<br/><br/><br/><br/>interface GigabitEthernet2/2<br/>ip arp inspection limit rate 100<br/>arp timeout 2<br/>ip dhcp snooping limit rate 100<br/>!<br/>interface GigabitEthernet2/3<br/>ip arp inspection limit rate 100<br/>arp timeout 2<br/>ip dhcp snooping limit rate 100<br/>!<br/>interface GigabitEthernet2/4<br/>ip arp inspection limit rate 100<br/>arp timeout 2<br/>ip dhcp snooping limit rate 100</font><br/></span>