Huawei Quidway S2700 Series Configuration Manual page 9

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
4.3 Configuring IP Source Guard.........................................................................................................................122
4.3.1 Establishing the Configuration Task.....................................................................................................122
4.3.2 (Optional) Configuring a Static User Binding Entry.............................................................................123
4.3.3 Enabling IP Source Guard.....................................................................................................................123
4.3.4 Configuring the Check Items of IP Packets...........................................................................................124
4.3.5 (Optional) Configuring the Alarm Function of IP Source Guard..........................................................125
4.3.6 (Optional) Configuring the Function of Discarding IP Packets with the Same Source and Destination IP
Addresses........................................................................................................................................................125
4.3.7 Checking the Configuration...................................................................................................................126
4.4 Configuration Examples.................................................................................................................................126
4.4.1 Example for Configuring IP Source Guard...........................................................................................126
5 Local Attack Defense Configuration.....................................................................................129
5.1 Configuring the Attack Defense Policy..........................................................................................................130
5.1.1 Establishing the Configuration Task.....................................................................................................130
5.1.2 (Optional) Configuring the Rule for Sending Packets to the CPU........................................................130
6 PPPoE+ Configuration..............................................................................................................132
6.1 PPPoE+ Overview..........................................................................................................................................133
6.2 PPPoE+ Features Supported by the S2700.....................................................................................................133
6.3 Configuring PPPoE+......................................................................................................................................133
6.3.1 Establishing the Configuration Task.....................................................................................................133
6.3.2 Enabling PPPoE+ Globally...................................................................................................................134
6.3.3 Configuring the Format and Contents of Fields to Be Added To PPPoE Packets................................134
6.3.4 Configuring the Action for Processing Original Fields in PPPoE Packets...........................................134
6.3.5 Configuring the PPPoE Trusted Interface.............................................................................................135
6.3.6 Checking the Configuration...................................................................................................................136
6.4 Configuration Examples.................................................................................................................................136
6.4.1 Example for Configuring PPPoE+........................................................................................................136
7 MFF Configuration....................................................................................................................139
7.1 MFF Overview...............................................................................................................................................140
7.2 MFF Features Supported by the S2700..........................................................................................................141
7.3 Configuring MFF............................................................................................................................................142
7.3.1 Establishing the Configuration Task.....................................................................................................142
7.3.2 Enabling Global MFF............................................................................................................................142
7.3.3 Configuring the MFF Network Interface...............................................................................................143
7.3.4 Enabling MFF in a VLAN.....................................................................................................................143
7.3.5 (Optional) Configuring the Static Gateway Address.............................................................................144
7.3.6 (Optional) Enabling Timed Gateway Address Detection......................................................................144
7.3.7 (Optional) Setting the Server Address...................................................................................................145
7.3.8 (Optional) Transparently Transmitting User Status Detection Packets.................................................145
7.3.9 (Optional) Discarding IPv6 Packets Sent from Users...........................................................................146
7.3.10 Checking the Configuration.................................................................................................................146
7.4 Configuration Examples.................................................................................................................................147
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Contents
viii