想利用DHCP SNOOPING阻止非DHCP用户上网

zzx0011982

                               
登录/注册后可看大图

我在华为模拟器上配了相关命令就是不好使求大神帮忙给解决一下。
vlan batch 2
#
drop illegal-mac alarm
#
dhcp enable
#
dhcp snooping enable
#
diffserv domain default
#
drop-profile default
#
ip pool dhcp
gateway-list 192.168.2.254
network 192.168.2.0 mask 255.255.255.0
dns-list 114.114.114.114
#
interface Vlanif2
ip address 192.168.2.254 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 2
dhcp snooping sticky-mac
dhcp snooping enable
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 2
dhcp snooping sticky-mac
dhcp snooping enable