SAVI Configuration

show savi config

[Command]

show savi config

[Purpose]

View SAVI function configuration information

[View]

System view

[Use Cases]

sonic# show savi config
+--------------+-------------+
| Interfaces | Check mode |
+==============+=============+
| Vlan100 | false |
+--------------+-------------+
| Vlan200 | true |
+--------------+-------------+

savi enable

[Command]

savi enable

no savi enable

[Purpose]

Enable the SAVI detection function of the interface

[View]

VLAN view

[Notes]

After enabling SAVI function, the device will compare the source IP, source MAC, snooping table entry and User-bind table entry of the received ND protocol packets, DHCPv6 protocol packets, and if it can hit, the packets will be passed, otherwise the packets will be dropped.

[Use Cases]

sonic(config)# vlan 100
sonic(config-vlan-100)# savi enable

savi trusted-interface

[Command]

savi trusted-interface vlan VLAN-ID

no savi trusted-interface vlan VLAN-ID

[Purpose]

Configuring SAVI trusted ports

[View]

VLAN view

[Notes]

After configured as a SAVI trusted port, ND protocol packets and DHCPv6 protocol packets received from this port will not be checked by SAVI and will all be allowed to pass.

[Use Cases]

sonic(config)# interface ethernet 1
sonic(config-if-1)# savi trusted-interface vlan 10

savi alarm enable

[Command]

savi alarm enable

savi alarm threshold alarm_threshold

[Purpose]

Enable the packet inspection alarm function

[View]

Interface view

[Notes]

When this feature is enabled, when the packets discarded on the device due to the packet inspection function exceed the alarm threshold, a log is recorded.

[Use Cases]

sonic(config)# interface ethernet 1
sonic(config-if-1)# savi alarm enable