H3C S5120-SI Series Configuration Manual

Also see for S5120-SI Series: Quick start guide Installation manual Operation manual Configuration guide Command reference

Contents

H3C S5120-SI Series Configuration Manual Manual pdf 83 page image

83Indexaddressassigning to interface (IP addressing) ................ 32address resolution (ARP) ..................................... 12aging time (ARP) ............................................... 14applicationBOOTP ......................................................... 55relay agent environment (DHCP).......................33trusted port environment (DHCP) ....................... 47ARPaddress resolution process ............................... 12attack defense configuration ............................ 18configuration ....................................... 11, 13, 15configuring active acknowledgement ................ 18configuring detection ...................................... 21configuring detection based on 802.1X securityentries .......................................................22configuring detection based on DHCP snoopingentries for a VLAN ......................................22configuring detection based on specified objects 24configuring detection based on static IP-to-MACbindings .................................................... 23configuring max number interface entries .......... 14configuring packet rate limit............................ 20configuring source MAC address based attackdetection .................................................... 19configuring static entry .................................... 13detection configuration example I .....................25detection configuration example II .................... 27detection type selection ................................... 23detection types all specified ............................. 23displaying ..................................................... 17displaying ARP detection ................................ 25displaying source MAC address based ARP attackdetection ................................................... 20dynamic entry................................................ 13enabling entry check ...................................... 15function ......................................................... 11gratuitous configuration .................................. 16maintaining ................................................... 17maintaining ARP detection .............................. 25maintaining source MAC address based ARPattack detection .......................................... 20man-in-the-middle attack ................................. 21message format ..............................................11periodic sending of gratuitous ARP packetsconfiguration .............................................. 28setting dynamic entry aging time ..................... 14static entry .................................................... 13table ............................................................ 13assigningIP address to interface .................................... 32BOOTPapplication.................................................... 55client configuration ................................... 55, 56configuring interface to dynamically obtain IPaddress ..................................................... 56displaying client ............................................. 56dynamically obtain IP address ......................... 55maintaining client .......................................... 56protocols and standards ................................. 55class (IP address) ............................................... 30client