SAVI Configuration

show savi config

[Command] show savi config

[Purpose] View SAVI function configuration information

[View] System view

[Use Cases]

sonic# show savi config
+--------------+-------------+
| Interfaces | Check mode |
+==============+=============+
| Vlan100 | false |
+--------------+-------------+
| Vlan200 | true |
+--------------+-------------+

savi enable

[Command] savi enable no savi enable

[Purpose] Enable the SAVI detection function of the interface

[View] VLAN view

[Notes] After enabling SAVI function, the device will compare the source IP, source MAC, snooping table entry and User-bind table entry of the received ND protocol packets, DHCPv6 protocol packets, and if it can hit, the packets will be passed, otherwise the packets will be dropped.

[Use Cases]

sonic(config)# vlan 100
sonic(config-vlan-100)# savi enable

savi trusted-interface

[Command] savi trusted-interface vlanVLAN-ID no savi trusted-interface vlanVLAN-ID

[Purpose] Configuring SAVI trusted ports

[View] VLAN view

[Notes] After configured as a SAVI trusted port, ND protocol packets and DHCPv6 protocol packets received from this port will not be checked by SAVI and will all be allowed to pass.

[Use Cases]

sonic(config)# interface ethernet 1
sonic(config-if-1)# savi trusted-interface vlan 10

savi alarm enable

[Command] savi alarm enable savi alarm thresholdalarm_threshold

[Purpose] Enable the packet inspection alarm function

[View] Interface view

[Notes] When this feature is enabled, when the packets discarded on the device due to the packet inspection function exceed the alarm threshold, a log is recorded.

[Use Cases]

sonic(config)# interface ethernet 1
sonic(config-if-1)# savi alarm enable