Acl Antimacspoof Commands - ZyXEL Communications MSC1000G User Manual

Table 347 acl Commands (continued)
COMMAND
show
usbcastctrl disable
enable
set
show
usstorm set
show

19.2 acl antimacspoof Commands

Use these commands to configure the Anti-MAC Spoofing feature. Anti-MAC Spoofing is a service
which detects hosts with fake or duplicated MAC addresses which attempt to access your system.
19.2.1 acl antimacspoof Command
Syntax:
acl antimacspoof show
This command shows whether the antimacspoof feature is enabled or not.
The following figure shows an example.
ras> acl antimacspoof enable
ras> acl antimacspoof show
antimacspoof state: enable
19.3 acl arpinspection Commands
Use these commands to configure the ARP inspection feature. ARP inspection checks ARP packets
and drops them if the MAC address to IP address binding does not match that of a learned or
manually added trusted client. This prevents many common man-in-the-middle attacks.
Management Switch Card User's Guide
DESCRIPTION
Specifies an IP address subnet for which to
set <ip>/<mask>
configure a subnet-based VLAN.
<vid> <priority>
[<name>]
Displays whether subnet-based VLAN is enabled
or disabled and list VLANs.
Disables rate limit for broadcast traffic.
Enables rate limit for broadcast traffic.
Sets the maximum bandwidth for all upstream
<rate>
broadcast traffic entering the MSC.
rate: 32~16384 kbps in increments of 32 kbps.
Displays rate limit settings.
Sets upstream broadcast storm control limits
<slot-port>
(from 0~148810) for the number of broadcast,
<bcast> <mcast>
multicast, and/or unknown unicast packets the
<uucast>
switch receives per second on the specified
subscriber ports. -1 means no limit.
Displays the upstream broadcast storm control
<slot>|<slot-
limits for the specified slot or port.
port>
Chapter 19 acl Commands
P
8
1
8
8
8
1
8
1
655