Huawei S1700 Series Web User Manual page 170

S1700 Managed Series Ethernet Switches
Web User Manual
Figure 9-48 Interface
Table 9-32 Parameters of Interface
Item
Query
Interface Name
Trust Status
Limited Speed Status
Rate
Status
Set Interface as Untrusted Interface
Step 1 Click Security> DAI
Step 2 Click Interface in Tab.
Step 3 Click the checkbox on the left side of DAI parameter interface to be configured, and then
click Configure, the configuration page is displayed as follows.
Figure 9-49 Configure Interface DAI
Issue 05 (2012-10-25)
Description
Search the DAI settings of specified interface in Interface Name.
Interface number
The options of DAI trusted status of interface are:
Trust port: the switch does not check the received ARP packets.
Untrust port: the switch can check the ARP packet on the interface
with specified rate limitation.
Whether to restrict the DHCP / ARP message of distrusted
interface.
Conduct rate limits for ARP message. If received ARP packets
exceed this rate, the switch will consider this interface is over speed
(i.e., attack). At this point, the switch will close the interface and no
longer receive any messages, to avoid it having the state of
paralysis because of a large number of attacking packets.
The processing behaviors are conducted for ARP message by
Interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
160