Huawei Quidway S9300 Configuration Manual page 10

Contents
9.2 Interface Security Features Supported by the S9300......................................................................................9-2
9.3 Configuring Interface Security........................................................................................................................9-2
9.3.1 Establishing the Configuration Task......................................................................................................9-3
9.3.2 Enabling the Interface Security Function...............................................................................................9-3
9.3.3 (Optional) Configuring the Protection Action in Interface Security......................................................9-4
9.3.4 Setting the Maximum Number of MAC Addresses Learned by an Interface........................................9-4
9.3.5 Enabling Sticky MAC on an Interface...................................................................................................9-5
9.3.6 Checking the Configuration...................................................................................................................9-5
9.4 Configuration Examples..................................................................................................................................9-6
9.4.1 Example for Configuring Interface Security..........................................................................................9-6
10 Traffic Suppression Configuration....................................................................................10-1
10.1 Introduction to Traffic Suppression............................................................................................................10-2
10.2 Traffic Suppression Features Supported by the S9300...............................................................................10-2
10.3 Configuring Traffic Suppression.................................................................................................................10-2
10.3.1 Establishing the Configuration Task..................................................................................................10-2
10.3.2 Configuring Traffic Suppression on an Interface...............................................................................10-3
10.3.3 Checking the Configuration...............................................................................................................10-4
10.4 Configuration Examples..............................................................................................................................10-4
10.4.1 Example for Configuring Traffic Suppression...................................................................................10-4
11 ACL Configuration................................................................................................................11-1
11.1 Introduction to the ACL..............................................................................................................................11-2
11.2 Classification of ACLs Supported by the S9300........................................................................................11-2
11.3 Configuring an ACL....................................................................................................................................11-3
11.3.1 Establishing the Configuration Task..................................................................................................11-3
11.3.2 Creating an ACL................................................................................................................................11-4
11.3.3 (Optional) Setting the Time Range When an ACL Takes Effect.......................................................11-5
11.3.4 (Optional) Configuring the Description of an ACL...........................................................................11-5
11.3.5 Configuring a Basic ACL...................................................................................................................11-6
11.3.6 Configuring an Advanced ACL.........................................................................................................11-6
11.3.7 Configuring a Layer 2 ACL...............................................................................................................11-7
11.3.8 (Optional) Setting the Step of an ACL...............................................................................................11-8
11.3.9 Checking the Configuration...............................................................................................................11-8
11.4 Configuring ACL6......................................................................................................................................11-9
11.4.1 Establishing the Configuration Task..................................................................................................11-9
11.4.2 Creating an ACL6............................................................................................................................11-10
11.4.3 (Optional) Creating the Time Range of the ACL6...........................................................................11-10
11.4.4 Configuring a Basic ACL6...............................................................................................................11-11
11.4.5 Configuring an Advanced ACL6.....................................................................................................11-11
11.4.6 Checking the Configuration.............................................................................................................11-12
11.5 Configuration Examples............................................................................................................................11-13
11.5.1 Example for Configuring a Basic ACL............................................................................................11-13
11.5.2 Example for Configuring an Advanced ACL..................................................................................11-16
viii Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010-01-08)