Configuring The Service Gateway Mac Anti-Spoofing - Zte ZXA10 C300 Configuration Manual

4. (Optional) Query the configuration of MAC address anti-spoofing.
ZXAN(config)#show security mac-anti-spoofing configuration
mac-move-report :enable
mac-move-report interval:30[minutes]
mac-anti-spoofing :enable
uplink-protect
5. (Optional) Query the MAC move log.
ZXAN#show security mac-move-log
Flag *--macMove is forbidden by system.
the total mac-move-log num:2
-------------------------------------------------------------------------
mac-address
index trapFlag detector queryPort
-------------------------------------------------------------------------
0002.0304.0506 100
1
-------------------------------------------------------------------------
0002.0304.0507 100
2
– End of Steps –

14.2.2 Configuring the Service Gateway MAC Anti-Spoofing

Service gateway MAC address anti-spoofing prevents malicious MAC address spoofing
between user ports and permits MAC address learning between uplink ports.
Context
The ZXA10 C300 supports the following features by service gateway MAC anti-spoofing:
l
A MAC address learnt by a user port can be learnt by an uplink port as well.
l
The same MAC address cannot be learnt by two user ports.
l
The same MAC address can be learnt by multiple uplink ports.
Steps
1. Enable global MAC address anti-spoofing function.
ZXAN(config)#security mac-anti-spoofing enable
2. Enable MAC address anti-spoofing function with uplink protection.
ZXAN(config)#security mac-anti-spoofing uplink-protect enable
3. (Optional) Query the configuration of MAC address anti-spoofing.
ZXAN(config)#show security mac-anti-spoofing configuration
SJ-20130520164529-007|2013-06-30 (R1.0)
:disable
vlan cfgMacProtect
UNNEED
SENDED MP UNNEED
UNNEED
*SENDED MP UNNEED
Chapter 14 Access Security Configuration
moveToPort
moveFromPort
inner-port_1/12/1
inner-port_1/5/1
inner-port_1/12/2
inner-port_1/5/1
14-9
moveToIfId moveCount
moveFromIfId trapCount
unknown(0)
unknown(0)
unknown(0)
unknown(0)
ZTE Proprietary and Confidential
1
1
1
1