6.4 Configuring Attack Source Tracing................................................................................................................6-8

6.4.1 Establishing the Configuration Task......................................................................................................6-8

6.4.2 Creating an Attack Defense Policy........................................................................................................6-9

6.4.3 Enabling the Automatic Attack Source Tracing.....................................................................................6-9

6.4.4 Configuring the Threshold of Attack Source Tracing..........................................................................6-10

6.4.5 (Optional) Configuring the Attack Source Alarm Function.................................................................6-10

6.4.6 Applying the Attack Defense Policy....................................................................................................6-11

6.4.7 Checking the Configuration.................................................................................................................6-12

6.5 Maintaining the Attack Defense Policy........................................................................................................6-13

6.5.1 Clearing Statistics About Packets Destined for the CPU.....................................................................6-13

6.5.2 Clearing Statistics About Attack Sources............................................................................................6-13

6.6 Configuration Examples................................................................................................................................6-14

6.6.1 Example for Configuring the Attack Defense Policy...........................................................................6-14

7 PPPoE+ Configuration..............................................................................................................7-1

7.1 PPPoE+ Overview...........................................................................................................................................7-2

7.2 PPPoE+ Features Supported by the S9300.....................................................................................................7-2

7.3 Configuring PPPoE+.......................................................................................................................................7-2

7.3.1 Establishing the Configuration Task......................................................................................................7-2

7.3.2 Enabling PPPoE+ Globally....................................................................................................................7-3

7.3.3 Configuring the Format and Contents of Fields to Be Added To PPPoE Packets.................................7-3

7.3.4 Configuring the Action for Processing Original Fields in PPPoE Packets............................................7-4

7.3.5 Configuring the PPPoE Trusted Interface..............................................................................................7-4

7.3.6 Checking the Configuration...................................................................................................................7-5

7.4 Configuration Examples..................................................................................................................................7-5

7.4.1 Example for Configuring PPPoE+.........................................................................................................7-5

8 MFF Configuration....................................................................................................................8-1

8.1 MFF Overview................................................................................................................................................8-2

8.2 MFF Features Supported by the S9300...........................................................................................................8-3

8.3 Configuring MFF............................................................................................................................................8-4

8.3.1 Establishing the Configuration Task......................................................................................................8-4

8.3.2 Enabling Global MFF.............................................................................................................................8-5

8.3.3 Configuring the MFF Network Interface...............................................................................................8-5

8.3.4 Enabling MFF in a VLAN.....................................................................................................................8-6

8.3.5 (Optional) Configuring the Static Gateway Address.............................................................................8-6

8.3.6 (Optional) Enabling Timed Gateway Address Detection.......................................................................8-7

8.3.7 (Optional) Setting the Server Address...................................................................................................8-7

8.3.8 Checking the Configuration...................................................................................................................8-7

8.4 Configuration Examples..................................................................................................................................8-8

8.4.1 Example for Configuring MFF..............................................................................................................8-8

9 Interface Security Configuration............................................................................................9-1

9.1 Interface Security Overview............................................................................................................................9-2

Issue 06 (2010-01-08)

Huawei Proprietary and Confidential

Contents

vii

Table of Contents