Mac Attack; Illegal Packet Settings - Huawei S1700 Series Web User Manual

S1700 Managed Series Ethernet Switches
Web User Manual
Step 4 Select Untrust Port from drop down menu of Trust Status.
Step 5 Click Apply button to apply the changes made.
----End
DAI untrust port don‟t support Link Aggregation. If port is the member of Link Aggregation,
DAI untrust status cannot be configured, and vice versa.
DAI ARP rate limit don‟t support Link Aggregation. If port is the member of Link
Aggregation, DAI ARP rate limit cannot be enabled, and vice versa.

9.11 MAC Attack

9.11.1 Illegal Packet Settings

Click Security> MAC Attack> Illegal Packet Settings, the configuration page is displayed as
follows.
Figure 9-50 Illegal Packet Settings
Table 9-33 Parameters of Illegal Packet Settings
Item
Illegal Packet Discarded
Warning Illegal Packets
Dropped
Issue 05 (2012-10-25)
CAUTION
Description
Enable /Disable Illegal packet Discard. If the switch receives
message's source or destination MAC address with all illegal 0,
it can perform this command and drop the illegal message.
Click this button to apply Illegal Packets Warning Discard. If
the switch receives the first message's source or destination
MAC address with all illegal 0, it will drop this message and
report an alarm to network manager. If receiving illegal
message subsequently, the switch will only drop this massage
and will not report the alarm. By implementation of this
command, you can remove the last alarm (including the
dropped massage with illegal MAC address 0) to re-trigger a
new alarm.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
161