Huawei S1720 Series Product Description page 29

S1720 Series Ethernet Switches
Product Description
Feature
Network
manage
ment
Issue 01 (2014-07-20)
Description
MAC address authentication
Portal authentication
ARP security Dynamic ARP Inspection (DAI) and Static ARP Inspection (SAI)
Egress ARP Inspection (EAI)
ARP packet suppression based on source IP addresses, interfaces,
and VLANs, and global ARP packet suppression
IP security ICMP attack defense
IP source guard
Local attack CPU attack defense
defense
MFF MAC-Forced Forwarding (MFF)
DHCP DHCP Snooping
Snooping
Option 82 and dynamic DHCP packet rate limiting
Attack Defense against flood attacks without IP payloads, attacks from
defense IGMP null payload packets, LAND attacks, Smurf attacks, and
attacks from packets with invalid TCP flag bits
Defense against attacks from many fragments, attacks from many
packets with offsets, attacks from repeated packet fragments,
Tear Drop attacks, Syndrop attacks, NewTear attacks, Bonk
attacks, Nesta attacks Rose attacks, Fawx attacks, Ping of Death
attacks, and Jolt attacks
Defense against TCP SYN flood attacks, UDP flood attacks
(including Fraggle attacks and UDP diagnosis port attacks), and
ICMP flood attacks
- Ping and traceroute
Network Time Protocol (NTP)
HTTP
Hypertext Transfer Protocol Secure (HTTPS)
SNMPv1/v2/v3
Standard MIB
Remote network monitoring (RMON)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 Product Performance
24