Access Service Configuration - Zte ZXR10 2910E-PS Configuration Manual

ZXR10 2900E Series Configuration Guide
zte(cfg)#set arp-inspection vlan 1 enable
zte(cfg)#set arp-inspection port 49 untrust
zte(cfg)#set arp-inspection port 49 limit 15
zte(cfg)#set arp-inspection validate ip enable
zte(cfg)#set arp-inspection validate dst-mac enable
zte(cfg)#set arp-inspection validate src-mac enable
DAI detection condition: the port sent is non-trusted port, DAI function is enabled on
the VLAN. When DHCP Snooping is enabled and non-trusted port is added into DHCP
Snooping, DAI detection is valid.
l
Configuration Verification
zte(cfg)#show arp-inspection
Enabled validation: ip,dst-mac,src-mac
Enabled vlanlist
PortId
------
49
50
51
52

4.19 Access Service Configuration

Access Service Overview
With the rapid expansion of Ethernet construction scale, to meet the fast increase of
subscribers and requirement of diversified broadband services, Network Access Service
(NAS) is embedded on the switch to improve the authentication and management of
access subscribers and better support the billing, security, operation, and management
of the broadband network.
NAS uses the 802.1x protocol and RADIUS protocol to realize the authentication and
management of access subscribers. It is highly efficient, safe, and easy to operate.
IEEE 802.1x is called port-based network access control protocol. Its protocol system
includes three key parts: client system, authentication system, and authentication server.
l The client system is generally a user terminal system installed with the client software.
A subscriber originates the IEEE802.1x protocol authentication process through this
client software. To support the port-based network access control, the client system
must support the Extensible Authentication Protocol Over LAN (EAPOL).
SJ-20120409144109-002|2012-07-02(R1.0)
Note:
: 1
TrustType Limit(pps)
--------- ----------
Untrust 15
Trust -
Trust -
Trust -
4-66
ZTE Proprietary and Confidential