Huawei Quidway S2700 Series Configuration Manual page 200

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
Configuration Roadmap
The configuration roadmap is as follows (assume that the ND server is configured):
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Configure ND snooping.
# Enable ND snooping globally.
<Quidway> system-view
[Quidway] dhcp enable
[Quidway] nd snooping enable
# Enable DHCP snooping an interfaces.
[Quidway] interface gigabitethernet 0/0/2
[Quidway-GigabitEthernet0/0/2] nd snooping enable
[Quidway-GigabitEthernet0/0/2] quit
Step 2 Configure GE 0/0/1 as the trusted interface.
[Quidway] interface gigabitethernet 0/0/1
[Quidway-GigabitEthernet0/0/1] nd snooping trusted
[Quidway-GigabitEthernet0/0/1] quit
After ND snooping is enabled on GE 0/0/2, the interface is the untrusted interface by default.
Step 3 Configure the aging function of the ND dynamic binding table.
# Set the detection interval and the number of detection times for aging ND dynamic binding
entries.
[Quidway] nd user-bind detect enable
[Quidway] nd user-bind detect retransmit 5 interval 600
Step 4 Verify the configuration.
Run the display this command in the system view, and you can view that ND snooping is enabled
globally and on the interface.
[Quidway] display this
nd snooping enable
nd user-bind detect enable
nd user-bind detect retransmit 5 interval 600
Issue 01 (2011-07-15)
Enable ND snooping in the system view and interface view.
Configure the interface connected to the ND server as the trusted interface.
Configure the aging function of the ND dynamic binding table.
Interfaces in trusted or untrusted mode: GE 0/0/1 in trusted mode and GE 0/0/2 in untrusted
mode
Detection interval for aging ND dynamic binding entries
Number of detection times for aging ND dynamic binding entries
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
10 ND Snooping Configuration
189