关于DAI问题

_________CT

拓扑环境:
DHCP服务器与SW1通过G0/1相连,SW1,SW2之间通过G0/17-18相连,DHCP客户端PC通过G0/2与SW2相连;

请问当部署完成基于VLAN的 DHCP snooping 和 DAI 后, 为什么将关联在该vlan的一台PC的接口的MAC地址修改后,接口down掉,然后又会up起来,并且DHCP服务器会向该PC分配一个新的地址?!在交换机的 DHCP snooping database 里面也能看到修改后的MAC地址和新分配的ip地址关联在该接口的条目,而未修改MAC地址的条目也同时存在. 请问该如何解决?
相关配置如下:
SW1:
hostname sw1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
system mtu routing 1500
vtp domain rack01
vtp mode transparent
ip subnet-zero
ip routing
!
!
ip dhcp snooping vlan 10
ip dhcp snooping
ip arp inspection vlan 10


spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10


interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access
ip arp inspection trust
spanning-tree portfast
ip dhcp snooping trust


interface GigabitEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust
!
interface GigabitEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust
!

SW2:
hostname sw2
!
boot-start-marker
boot-end-marker


no aaa new-model
system mtu routing 1500
vtp domain rack01
vtp mode transparent
ip routing
ip arp inspection vlan 10
!         
!         
!         
ip dhcp snooping vlan 10
ip dhcp snooping
   
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10

interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
switchport access vlan 10
switchport mode access
ip arp inspection limit rate 100
spanning-tree portfast


interface GigabitEthernet0/4
switchport access vlan 10
switchport mode access
spanning-tree portfast


interface GigabitEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust
!
interface GigabitEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust



DHCP server:
ip dhcp pool true_dhcp
network 1.1.1.0 255.255.255.0
default-router 1.1.1.1
dns-server 8.8.8.8

吴绪城

呵呵，，，忘了。。。。