ACI DHCP 구성 가이드
2017.04.04
Cisco Systems Korea
최 우 형 수석부장 (whchoi@cisco.com)
ACI Topology for DHCP Relay
EPG :
11
BD : 1
VRF : 1
Tenant-DHCP-TEST
EPG:
1
VLAN 131 VLAN 132
BD : 11
EPG :
12
BD : 2
VRF : 2
192.168.2.1/24
EPG:
2
VLAN 133 VLAN 134
BD : 12
Tenant-Common
BD : DHCP
VRF : DHCP
192.168.111.1/24
EPG:
DHCP
VLAN 135
1.X Client 11.X Client 2.X Client 12.X Client
192.168.1.1/24 192.168.11.1/24 192.168.12.1/24
FABRIC-INFRA
TENANT DHCP ACCESS
Global DHCP ACCESS
LINUX (.254)
DHCP SERVER
W2K16 (.33)
DHCP SERVER
#1. Global DHCP ACCESS config – Create DHCP Relay Policy
1 Fabric – Access Policies
Global Policies – DHCP Relay Policies
2 Create DHCP Relay Policy
- Name & Providers 구성
3 DHCP Provider
- DHCP EPG Mapping
- DHCP EP Address 설정
1
2
3
#1. Global DHCP ACCESS config – Create DHCP Relay Label
1 Tenant – “Tenant using DHCP” –
Networking – BD – DB using DHCP
- DHCP Relay Label
2 Create DHCP Relay Label
- DHCP Relay Label 구성
#2. TENANT Based DHCP Config - Create DHCP Relay Policy
1 Tenants – Common – “BD for DHCP”
– DHCP Relay Lable – Create DHCP
Relay Label
2 Create DHCP Relay Lable
- Tenant 선택
3 DHCP Relay Policy Profile 생성
- DHCP-TENANT 이름 생성
- Provider 생성
1
2
3
3
#2. TENANT Based DHCP Config - Create DHCP Relay Label
1 Tenants – Common – “BD for DHCP”
– DHCP Relay Lable – Create DHCP
Relay Label
2 Create DHCP Relay Lable
- Tenant 선택
- Common Tenant에서 생성된
DHCP Profile 선택
1 2
3 Networking – Protocol Polices –
DHCP – Relay Policies
- Relay Policy가 생성되었는 지
확인
Window 2016 server based – Packet dump (bootp.dhcp)
W2K16 DHCP SERVER DHCP CLIENT
DHCP Option 82
Bootp Flag
Window 2016 server based -DHCP Window 2016 Config Guide
1 Windows Server 2016 버전 확인
(OS Build – 14393.969)
2 Superscope Config
- Address Pool (DHCP IP range)
- Address Lease
(DHCP 주소 대여 확인)
- Scope Option (Router, DNS Option)
1
2
Linux Server Based- Packet dump (bootp.dhcp)
W2K16 DHCP SERVER DHCP CLIENT
DHCP Option 82
Linux server based -DHCP Config Guide
1 dhcpd install (ISC)
2 dhcpd interface config
root@LNX-DHCP:~# apt-get install isc-dhcp-server
root@LNX-DHCP:~# vim /etc/default/isc-dhcp-server
…..
INTERFACES="eth0“
…..
Linux server based -DHCP Config Guide
3 dhcpd config
root@LNX-DHCP:~# vim /etc/dhcp/dhcpd.conf
#default-lease-time : 클라이언트에게 IP 주소를 부여할 시간
#max-lease-time : 연장가능한 최대 시간
default-lease-time 600;
max-lease-tiem 7200;
# 사용될 서브넷과 넷마스크 설정
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.11 192.168.1.100;
option domain-name-servers 8.8.8.8;
option domain-name "cisko-dc.com';
option routers 192.168.1.1;
option broadcast-address 192.168.0.255;
}
Linux server based -DHCP Config Guide
4 DHCP Option 82 Link Selection 인식을 위한 설정
root@LNX-DHCP:~# vim /etc/dhcp/dhcpd.conf
ignore client-updates;
authoritative;
stash-agent-options true;
#Option 82 link-selection enable
option agent.link-selection ip-address;
option routers 192.168.111.254;
#동일서브넷 DHCP 설정
subnet 192.168.111.0 netmask 255.255.255.0{
option routers 192.168.111.1;
option subnet-mask 255.255.255.0;
pool {
range 192.168.111.11 192.168.11.20;
}
#DHCP relay 관련 DHCP 설정 - 4개 BD, 4개 서브넷 구성 예.
class "BD-1Net" {
match if(binary-to-ascii(10, 8, ".", option agent.link-selection) = "192.168.1.0");
}
shared-network BD-1Net {
subnet 192.168.1.0 netmask 255.255.255.0 {
option routers 192.168.1.1;
option subnet-mask 255.255.255.0;
pool {
allow members of "BD-1Net";
range 192.168.1.101 192.168.1.110;
}
}
}
Linux server based -DHCP Config Guide
4 DHCP Option 82 Link Selection 인식을 위한 설정
shared-network BD-2Net {
subnet 192.168.2.0 netmask 255.255.255.0 {
option routers 192.168.2.1;
option subnet-mask 255.255.255.0;
pool {
allow members of "BD-2Net";
range 192.168.2.101 192.168.2.110;
}
}
}
shared-network BD-11Net {
subnet 192.168.11.0 netmask 255.255.255.0 {
option routers 192.168.11.1;
option subnet-mask 255.255.255.0;
pool {
allow members of "BD-11Net";
range 192.168.11.101 192.168.11.110;
}
}
}
shared-network BD-12Net {
subnet 192.168.12.0 netmask 255.255.255.0 {
option routers 192.168.12.1;
option subnet-mask 255.255.255.0;
pool {
allow members of "BD-2Net";
range 192.168.12.101 192.168.12.110;
}
}
}
5 DHCP Server restart
service isc-dhcp-server restart
DHCP Linux Config Guide
1 DHCP Server 확인
more /var/lib/dhcp/dhcpd.lease
Useful ACI Commands to Verify DHCP Configuration
1 DHCP 서버 구성 확인
LEAF-101# show ip dhcp relay
1 https://apic/visore.html
dhcpRelayP, dhcpRsProv, dhcpProvDhcp,
dhcpRtLblDefToRelayP
ACI DHCP 구성 가이드

More Related Content

PDF
Cellular technology with Embedded Linux - COSCUP 2016
PDF
ACI Multicast 구성 가이드
PDF
ACI MultiPod 구성
PDF
ACI MultiFabric 소개
PDF
Network Jumbo Frame Config Guide
PDF
ACI MultiPod Config Guide
PPT
12 module
PDF
LF_OVS_17_OVS-DPDK Installation and Gotchas
Cellular technology with Embedded Linux - COSCUP 2016
ACI Multicast 구성 가이드
ACI MultiPod 구성
ACI MultiFabric 소개
Network Jumbo Frame Config Guide
ACI MultiPod Config Guide
12 module
LF_OVS_17_OVS-DPDK Installation and Gotchas

What's hot (16)

PDF
Iperf Tutorial
PDF
PDF
NAT and firewall presentation - how setup a nice firewall
PDF
CCNA Lab Guide
PDF
Layer 3 redundancy hsrp
PPT
In depth understanding network security
PPTX
Fhrp notes
PDF
Practice Lab CSC
PDF
PPTX
Cisco CCNA-CCNP IP SLA Configuration
PPTX
Cisco CCNA- DHCP Server
DOC
Dmvpn with configuration example
PDF
SSL Web VPN
PDF
Introduction to Network Performance Measurement with Cisco IOS IP Service Lev...
PDF
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
DOCX
Cisco asa active,active failover configuration
Iperf Tutorial
NAT and firewall presentation - how setup a nice firewall
CCNA Lab Guide
Layer 3 redundancy hsrp
In depth understanding network security
Fhrp notes
Practice Lab CSC
Cisco CCNA-CCNP IP SLA Configuration
Cisco CCNA- DHCP Server
Dmvpn with configuration example
SSL Web VPN
Introduction to Network Performance Measurement with Cisco IOS IP Service Lev...
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
Cisco asa active,active failover configuration
Ad

Similar to ACI DHCP 구성 가이드 (20)

PPTX
ACI DHCP Config Guide
PPTX
[오픈소스컨설팅] Linux Network Troubleshooting
PDF
보안위협 관리통제
PDF
도커 없이 컨테이너 만들기 4편 네트워크네임스페이스 (2)
PPT
[OpenStack 하반기 스터디] HA using DVR
PDF
KINX와 함께 하는 AWS Direct Connect 도입 - 남시우 매니저, KINX :: AWS Summit Seoul 2019
PDF
IaC로 AWS인프라 관리하기 - 이진성 (AUSG) :: AWS Community Day Online 2021
PDF
컴퓨팅 서비스 업데이트 - EC2, ECS, Lambda (김상필) :: re:Invent re:Cap Webinar 2015
PDF
Make container without_docker_7
PDF
Dhcp
PDF
Make container without_docker_6-overlay-network_1
PDF
AWS Builders Online Series | 컨테이너, AWS에서 날개를 달다 - 유재석, AWS 솔루션즈 아키텍트
PDF
AWS Transit Gateway를 통한 Multi-VPC 아키텍처 패턴 - 강동환 솔루션즈 아키텍트, AWS :: AWS Summit ...
PDF
더욱 진화하는 AWS 네트워크 보안 - 신은수 AWS 시큐리티 스페셜리스트 솔루션즈 아키텍트 :: AWS Summit Seoul 2021
PDF
DHCP concept
PDF
dhcp.pdf
PPTX
SDN OpenFlow Load Balancer 시나리오
PPTX
Dr관련 세미나 자료 v2
PPTX
Dr관련 세미나 자료 v2333
PPTX
Network Algorithmics
ACI DHCP Config Guide
[오픈소스컨설팅] Linux Network Troubleshooting
보안위협 관리통제
도커 없이 컨테이너 만들기 4편 네트워크네임스페이스 (2)
[OpenStack 하반기 스터디] HA using DVR
KINX와 함께 하는 AWS Direct Connect 도입 - 남시우 매니저, KINX :: AWS Summit Seoul 2019
IaC로 AWS인프라 관리하기 - 이진성 (AUSG) :: AWS Community Day Online 2021
컴퓨팅 서비스 업데이트 - EC2, ECS, Lambda (김상필) :: re:Invent re:Cap Webinar 2015
Make container without_docker_7
Dhcp
Make container without_docker_6-overlay-network_1
AWS Builders Online Series | 컨테이너, AWS에서 날개를 달다 - 유재석, AWS 솔루션즈 아키텍트
AWS Transit Gateway를 통한 Multi-VPC 아키텍처 패턴 - 강동환 솔루션즈 아키텍트, AWS :: AWS Summit ...
더욱 진화하는 AWS 네트워크 보안 - 신은수 AWS 시큐리티 스페셜리스트 솔루션즈 아키텍트 :: AWS Summit Seoul 2021
DHCP concept
dhcp.pdf
SDN OpenFlow Load Balancer 시나리오
Dr관련 세미나 자료 v2
Dr관련 세미나 자료 v2333
Network Algorithmics
Ad

More from Woo Hyung Choi (7)

PDF
ACI Microsegment Config Guide
PDF
SDDC Strategy 1.3
PPTX
차세대 데이터센터 네트워크 전략
PPTX
Cisco network analytics 솔루션
PDF
Cisco DC 전략
PDF
Cisco sddc solution 소개
PDF
ACI Netflow 구성 가이드
ACI Microsegment Config Guide
SDDC Strategy 1.3
차세대 데이터센터 네트워크 전략
Cisco network analytics 솔루션
Cisco DC 전략
Cisco sddc solution 소개
ACI Netflow 구성 가이드

Recently uploaded (20)

PPT
What is a Computer? Input Devices /output devices
PDF
NewMind AI Weekly Chronicles – August ’25 Week III
PPT
Module 1.ppt Iot fundamentals and Architecture
PDF
A Late Bloomer's Guide to GenAI: Ethics, Bias, and Effective Prompting - Boha...
DOCX
search engine optimization ppt fir known well about this
PPTX
Tartificialntelligence_presentation.pptx
PDF
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
PPTX
O2C Customer Invoices to Receipt V15A.pptx
PPTX
Group 1 Presentation -Planning and Decision Making .pptx
PDF
Architecture types and enterprise applications.pdf
PDF
Unlock new opportunities with location data.pdf
PPTX
Benefits of Physical activity for teenagers.pptx
PDF
CloudStack 4.21: First Look Webinar slides
PDF
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
PDF
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
PPTX
The various Industrial Revolutions .pptx
PPTX
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
PDF
Taming the Chaos: How to Turn Unstructured Data into Decisions
PDF
Assigned Numbers - 2025 - Bluetooth® Document
PDF
DP Operators-handbook-extract for the Mautical Institute
What is a Computer? Input Devices /output devices
NewMind AI Weekly Chronicles – August ’25 Week III
Module 1.ppt Iot fundamentals and Architecture
A Late Bloomer's Guide to GenAI: Ethics, Bias, and Effective Prompting - Boha...
search engine optimization ppt fir known well about this
Tartificialntelligence_presentation.pptx
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
O2C Customer Invoices to Receipt V15A.pptx
Group 1 Presentation -Planning and Decision Making .pptx
Architecture types and enterprise applications.pdf
Unlock new opportunities with location data.pdf
Benefits of Physical activity for teenagers.pptx
CloudStack 4.21: First Look Webinar slides
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
The various Industrial Revolutions .pptx
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
Taming the Chaos: How to Turn Unstructured Data into Decisions
Assigned Numbers - 2025 - Bluetooth® Document
DP Operators-handbook-extract for the Mautical Institute

ACI DHCP 구성 가이드

  • 1. ACI DHCP 구성 가이드 2017.04.04 Cisco Systems Korea 최 우 형 수석부장 (whchoi@cisco.com)
  • 2. ACI Topology for DHCP Relay EPG : 11 BD : 1 VRF : 1 Tenant-DHCP-TEST EPG: 1 VLAN 131 VLAN 132 BD : 11 EPG : 12 BD : 2 VRF : 2 192.168.2.1/24 EPG: 2 VLAN 133 VLAN 134 BD : 12 Tenant-Common BD : DHCP VRF : DHCP 192.168.111.1/24 EPG: DHCP VLAN 135 1.X Client 11.X Client 2.X Client 12.X Client 192.168.1.1/24 192.168.11.1/24 192.168.12.1/24 FABRIC-INFRA TENANT DHCP ACCESS Global DHCP ACCESS LINUX (.254) DHCP SERVER W2K16 (.33) DHCP SERVER
  • 3. #1. Global DHCP ACCESS config – Create DHCP Relay Policy 1 Fabric – Access Policies Global Policies – DHCP Relay Policies 2 Create DHCP Relay Policy - Name & Providers 구성 3 DHCP Provider - DHCP EPG Mapping - DHCP EP Address 설정 1 2 3
  • 4. #1. Global DHCP ACCESS config – Create DHCP Relay Label 1 Tenant – “Tenant using DHCP” – Networking – BD – DB using DHCP - DHCP Relay Label 2 Create DHCP Relay Label - DHCP Relay Label 구성
  • 5. #2. TENANT Based DHCP Config - Create DHCP Relay Policy 1 Tenants – Common – “BD for DHCP” – DHCP Relay Lable – Create DHCP Relay Label 2 Create DHCP Relay Lable - Tenant 선택 3 DHCP Relay Policy Profile 생성 - DHCP-TENANT 이름 생성 - Provider 생성 1 2 3 3
  • 6. #2. TENANT Based DHCP Config - Create DHCP Relay Label 1 Tenants – Common – “BD for DHCP” – DHCP Relay Lable – Create DHCP Relay Label 2 Create DHCP Relay Lable - Tenant 선택 - Common Tenant에서 생성된 DHCP Profile 선택 1 2 3 Networking – Protocol Polices – DHCP – Relay Policies - Relay Policy가 생성되었는 지 확인
  • 7. Window 2016 server based – Packet dump (bootp.dhcp) W2K16 DHCP SERVER DHCP CLIENT DHCP Option 82 Bootp Flag
  • 8. Window 2016 server based -DHCP Window 2016 Config Guide 1 Windows Server 2016 버전 확인 (OS Build – 14393.969) 2 Superscope Config - Address Pool (DHCP IP range) - Address Lease (DHCP 주소 대여 확인) - Scope Option (Router, DNS Option) 1 2
  • 9. Linux Server Based- Packet dump (bootp.dhcp) W2K16 DHCP SERVER DHCP CLIENT DHCP Option 82
  • 10. Linux server based -DHCP Config Guide 1 dhcpd install (ISC) 2 dhcpd interface config root@LNX-DHCP:~# apt-get install isc-dhcp-server root@LNX-DHCP:~# vim /etc/default/isc-dhcp-server ….. INTERFACES="eth0“ …..
  • 11. Linux server based -DHCP Config Guide 3 dhcpd config root@LNX-DHCP:~# vim /etc/dhcp/dhcpd.conf #default-lease-time : 클라이언트에게 IP 주소를 부여할 시간 #max-lease-time : 연장가능한 최대 시간 default-lease-time 600; max-lease-tiem 7200; # 사용될 서브넷과 넷마스크 설정 subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.11 192.168.1.100; option domain-name-servers 8.8.8.8; option domain-name "cisko-dc.com'; option routers 192.168.1.1; option broadcast-address 192.168.0.255; }
  • 12. Linux server based -DHCP Config Guide 4 DHCP Option 82 Link Selection 인식을 위한 설정 root@LNX-DHCP:~# vim /etc/dhcp/dhcpd.conf ignore client-updates; authoritative; stash-agent-options true; #Option 82 link-selection enable option agent.link-selection ip-address; option routers 192.168.111.254; #동일서브넷 DHCP 설정 subnet 192.168.111.0 netmask 255.255.255.0{ option routers 192.168.111.1; option subnet-mask 255.255.255.0; pool { range 192.168.111.11 192.168.11.20; } #DHCP relay 관련 DHCP 설정 - 4개 BD, 4개 서브넷 구성 예. class "BD-1Net" { match if(binary-to-ascii(10, 8, ".", option agent.link-selection) = "192.168.1.0"); } shared-network BD-1Net { subnet 192.168.1.0 netmask 255.255.255.0 { option routers 192.168.1.1; option subnet-mask 255.255.255.0; pool { allow members of "BD-1Net"; range 192.168.1.101 192.168.1.110; } } }
  • 13. Linux server based -DHCP Config Guide 4 DHCP Option 82 Link Selection 인식을 위한 설정 shared-network BD-2Net { subnet 192.168.2.0 netmask 255.255.255.0 { option routers 192.168.2.1; option subnet-mask 255.255.255.0; pool { allow members of "BD-2Net"; range 192.168.2.101 192.168.2.110; } } } shared-network BD-11Net { subnet 192.168.11.0 netmask 255.255.255.0 { option routers 192.168.11.1; option subnet-mask 255.255.255.0; pool { allow members of "BD-11Net"; range 192.168.11.101 192.168.11.110; } } } shared-network BD-12Net { subnet 192.168.12.0 netmask 255.255.255.0 { option routers 192.168.12.1; option subnet-mask 255.255.255.0; pool { allow members of "BD-2Net"; range 192.168.12.101 192.168.12.110; } } } 5 DHCP Server restart service isc-dhcp-server restart
  • 14. DHCP Linux Config Guide 1 DHCP Server 확인 more /var/lib/dhcp/dhcpd.lease
  • 15. Useful ACI Commands to Verify DHCP Configuration 1 DHCP 서버 구성 확인 LEAF-101# show ip dhcp relay 1 https://apic/visore.html dhcpRelayP, dhcpRsProv, dhcpProvDhcp, dhcpRtLblDefToRelayP