Это, то что уже настроено на L3. Схема сети: L3 --> L2 --> сервер DHCP
Нужно сделать защиту от других DHCP, с помощью DHCP snooping. Есть статья, но я ее не до конца понял
viewtopic.php?t=6103sw1#show run
config-file-header
sw1
v5.5.1 / RLINUX_923_008
CLI v1.0
@
vlan database
vlan 200,202-212
exit
ip dhcp relay address 192.168.42.9
ip dhcp relay enable
hostname sw1
line ssh
exec-timeout 3
exit
username engineer password encrypted 09b399a1ecddf1e222e205c8d7b44b5d733836cd pr ivilege 15
ip ssh server
clock timezone MSK +3
sntp server 192.168.42.9
no ip domain lookup
ip name-server 192.168.42.9 192.168.42.7
no ip telnet server
!
interface vlan 1
ip address 192.168.42.254 255.255.255.0
no ip address dhcp
!
interface vlan 200
name managers
ip address 10.10.1.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 202
name admins
ip address 10.10.3.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 203
name pre-admins
ip address 10.10.4.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 204
name buh
ip address 10.10.5.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 205
name sklad
ip address 10.10.6.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 206
name shop
ip address 10.10.7.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 207
name aurora_adm
ip address 10.10.8.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 208
name other_org
ip address 10.10.9.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 209
name rukovodstvo
ip address 10.10.10.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 210
name sekretars
ip address 10.10.12.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 211
name device
ip address 10.10.13.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 212
name wifi
ip address 10.10.14.254 255.255.255.0
ip dhcp relay enable
!
interface TengigabitEthernet1/0/5
switchport mode trunk
!
interface TengigabitEthernet1/0/6
switchport mode trunk
!
interface TengigabitEthernet1/0/7
switchport mode trunk
!
interface TengigabitEthernet1/0/8
switchport mode trunk
!
interface TengigabitEthernet1/0/9
switchport mode trunk
!
interface TengigabitEthernet1/0/10
switchport mode trunk
!
interface TengigabitEthernet1/0/11
switchport mode trunk
!
exit
ip default-gateway 192.168.42.4
ip route 172.16.0.0 /24 192.168.42.4
ip route 192.168.44.0 /24 192.168.42.4
ip route 192.168.46.0 /24 192.168.42.4