DHCP conflicts often occur in the hotel network, which needs to be rectified. A preliminary plan for recommending equipment and configuration methods has been put forward.

Hotels had better use WLAN wireless coverage scheme. 200 people, domestic TP-LINK and D-LINK are enough. If you want to be stable and tough and have enough money, you can also use Cisco's wireless solution.

If you want to use cables, you can only buy a three-layer switch, and layer 2 switches can't do DHCP snooping.

Add the corresponding room interface to the VLAN you need on the Layer 3 switch, assuming VLAN 100.

After the basic VLAN access configuration is completed, the DHCP Snooping command is as follows:

Ip dhcp listening supports global dhcp listening.

Ip dhcp listens to vlan 100. Enable this function for VLAN 100 alone.

Interface range f0/ 1-20 These interfaces are connected to each guest room.

Ip DHCP snooping limit rate10 The interface connecting rooms limits the speed of DHCP packets to prevent DHCP address exhaustion attacks.

Interface range f0/2 1-24 These interfaces connect DHCP servers and other switches.

The Ip dhcp snooping trust is set to trust interfaces, and these interfaces are not monitored.

No IP DHCP snooping information option does not insert DHCP option82 field, and this command must be typed, otherwise the host cannot obtain the IP address.

Emphasize a few points for attention:

1. The interface connected to the DHCP server on the switch must be set as a trusted interface.

2. Interfaces connecting other switches should also be set as trust interfaces.

3. The global switch and the switch under VLAN must be knocked.

4, the last command will knock (all switches, unless you do DHCP relay)

5. I finally knocked so much that my hands were tired. Give it to me. Hey-hey-hey

6. In addition, the resource consumption of DHCP snooping switch is still a bit large. It is recommended to buy Cisco3560 and 3850 switches.