 Communication between information points and communication between internal and external networks are essential business requirements in enterprise networks.  To ensure the security of the internal network, it is necessary to use security policies to ensure that unauthorized users can only access specific network resources.

ACL Configuration

 ARP attack detection is one of the common methods to prevent ARP spoofing.  It is used to detect ARP packets based on DHCP Snooping and static binding entries on access devices, preventing ARP attacks from unauthorized users.

ARP Attack Detection Configuration

 IP Source Guard (IPSG) is a defense mechanism against IP address spoofing attacks.  It checks whether a user on a specific VLAN interface is a legitimate user based on the source IP address and source MAC address in the IP packet.

IPSG Configuration

 SAVI (Source Address Validation Improvement) is a mechanism used on access devices to validate the authenticity of IPv6 Neighbor Discovery (ND) protocol packets.  It is based on ND Snooping, DHCP Snooping, and static binding entries, and it helps prevent unauthorized packets from entering the internal network.

SAVI Configuration

 RA Guard functionality is used on Layer 2 access devices to prevent Router Advertisement (RA) message spoofing attacks.  When a Layer 2 access device receives an RA message with a unicast or multicast MAC address, the RA Guard functionality processes the RA message as follows If the port is not configured with a port role, the RA message is directly forwarded.

RA Guard Configuration

Querier Configuration

Security Configuration

delete-span-style

Enterprise & Campus Network

Preface

Applicable Hardware Models

Basic Configuration

Ethernet Interface Configuration

VLAN Configuration

MAC Address Table Configuration

QinQ Configuration

MSTP Configuration

Ethernet Link Aggregation Configuration

L2PT Configuration

Ethernet Switching Configuration

DHCP Server Configuration

DHCP  Relay Configuration

DHCP Snooping Configuration

ND Snooping Configuration

IP Service Configuration

Policy Route Configuration

IGMP Snooping Configuration

MLD Snooping Configuration

Multicast VLAN Configuration

IGMPv3 Configuration

IP Multicast Configuration

QoS Configuration

Traffic Mirroring Configuration

SNMP Configuration

Network Management and Monitoring Configuration

AAA Configuration

Configuration Guide

Device Management

Interface Management

MAC Configuration

Interface Isolation Group Configuration

LLDP Configuration

Link Aggregation Configuration

STP Configuration

Loopback Detection Configuration

Ethernet Switching

IPv4 Configuration

ARP Configuration

DHCP Relay Configuration

IPv6 Configuration

IP Service

IP Multicast

Reliability Configuration

ARP Detection Configuration

IPv6 RA Guard Configuration

User Binding Rule Configuration

Traffic Suppression And Storm Control Configuration

Copp Speed limit

Port Security

Syslog Configuration

SFLOW Configuration

Mirror Configuration

Network Management And Monitoring

Command Line Reference