Access Service Configuration - Zte ZXR10 2900E series Configuration Manual

zte(cfg)#set arp-inspection port 49 limit 15
zte(cfg)#set arp-inspection validate ip enable
zte(cfg)#set arp-inspection validate dst-mac enable
zte(cfg)#set arp-inspection validate src-mac enable
DAI detection condition: the port sending packets is a non-trusted port, and the DAI
function is enabled on the VLAN. When DHCP Snooping is enabled and a non-trusted
port is added into DHCP Snooping, DAI detection is valid.
l Configuration Verification
zte(cfg)#show arp-inspection
Enabled validation: ip,dst-mac,src-mac
Enabled vlanlist
PortId
------
49
50
51
52

5.18 Access Service Configuration

Access Service Overview
With the rapid expansion of Ethernet, to meet the fast increase of subscribers and
requirement of diversified broadband services, a Network Access Service (NAS) is
embedded on the switch to improve the authentication and management of access
subscribers and better support the billing, security, operation, and management of the
broadband network.
NAS uses the 802.1x protocol and RADIUS protocol to realize the authentication and
management of access subscribers. It is highly efficient, safe, and easy to operate.
IEEE 802.1x is called port-based network access control protocol. Its protocol system
includes three key parts: client system, authentication system, and authentication server.
l
The client system is a user terminal system installed with the client software. A
subscriber originates the IEEE802.1x protocol authentication process through this
client software. To support the port-based network access control, the client system
must support the Extensible Authentication Protocol Over LAN (EAPOL).
l
The authentication system is network equipment that supports the IEEE802.1x
protocol.
SJ-20130731155059-002|2013-11-27 (R1.0)
Note:
: 1
TrustType Limit(pps)
--------- ----------
Untrust 15
Trust -
Trust -
Trust -
Corresponding to the ports of different subscribers (the ports can be
Chapter 5 Service Configuration
5-71
ZTE Proprietary and Confidential