 ARP attack detection is one of the common methods to prevent ARP spoofing.  It is used to detect ARP packets based on DHCP Snooping and static binding entries on access devices, preventing ARP attacks from unauthorized users.

ARP Attack Detection Configuration

 IP Source Guard (IPSG) is a defense mechanism against IP address spoofing attacks.  It checks whether a user on a specific VLAN interface is a legitimate user based on the source IP address and source MAC address in the IP packet.

IPSG Configuration

 SAVI (Source Address Validation Improvement) is a mechanism used on access devices to validate the authenticity of IPv6 Neighbor Discovery (ND) protocol packets.  It is based on ND Snooping, DHCP Snooping, and static binding entries, and it helps prevent unauthorized packets from entering the internal network.

SAVI Configuration

 RA Guard functionality is used on Layer 2 access devices to prevent Router Advertisement (RA) message spoofing attacks.  When a Layer 2 access device receives an RA message with a unicast or multicast MAC address, the RA Guard functionality processes the RA message as follows If the port is not configured with a port role, the RA message is directly forwarded.

RA Guard Configuration

 Storm suppression is a security technique used to control broadcast, known multicast, unknown unicast, and unknown multicast packets, preventing these four types of packets from causing broadcast storms.  After configuring broadcast, known multicast, unknown unicast, and unknown multicast storm suppression on a port, when the traffic of broadcast, known multicast, unknown unicast, or unknown multicast packets on the port exceeds the threshold set by the user, the port will discard the packets that exceed the traffic threshold.

Storm Suppression Configuration

 Communication between information points and communication between internal and external networks are essential business requirements in enterprise networks.  To ensure the security of the internal network, it is necessary to use security policies to ensure that unauthorized users can only access specific network resources.

ACL Configuration

PIM-ASM Configuration

Security Configuration

delete-span-style

Enterprise & Campus Network

Preface

Applicable Hardware Models

Basic Configuration

Interface Management Configuration

VLAN Configuration

MAC Address Table Configuration

QinQ Configuration

MSTP Configuration

Ethernet Link Aggregation Configuration

MC-LAG Configuration

Ethernet Switch Configuration

DHCP Server Configuration

DHCP Relay Configuration

DHCP Snooping Configuration

ND Snooping Configuration

Snooping Table Synchronization Configuration

MAC-Scan Configuration

MAC-Trigger Configuration

IP Service Configuration

BGP Configuration

OSPF Basic Configuration

Policy Routing Configuration

IP Routing Configuration

IGMP Snooping Configuration

MLD Snooping Configuration

Multicast VLAN Configuration

IP Multicast Configuration

AAA Configuration

802.1x Authentication Configuration

User Access and Authentication

BFD Configuration

Monitor-Link Configuration

TRACK and SLA Configuration

VRRP Configuration

Reliability Configuration

PTP Configuration

SyncE Configuration

SNMP Configuration

sFlow Configuration

Traffic Mirroring Configuration

Network Management and Monitoring Configuration

QoS Configuration

MACsec configuration

VXLAN Configuration

Configuration Guide

Traffic Suppression And Storm Control Configuration

User Binding Rule Configuration

IPv6 RA Guard Configuration

ARP Detection Configuration

MAC Detection Configuration

Copp Speed limit

Priority Map Configuration

Traffic Regulation

Queue Scheduling

Mirror Configuration

SFLOW Configuration

Syslog Configuration

Network Management And Monitoring

Monitor Link Configuration

TRACK

IP-Conflict Configuration

Local User Configuration

TACACS Configuration

RADIUS Configuration

802.1X Authentication Configuration

User Access And Authentication

GRE Configuration

MACsec Configuration

EVPN Configuration

Login System

Command Line Configuration Interface

Management Port Configuration

Device Upgrade

System Boot Configuration

Device Status

Device Configuration

NTP Configuration

System Time Configuration

POE Configuration

Log Threshold Configuration

Diagnostic-information Configuration

Device Management

Interface Management

Link Aggregation Configuration

LLDP Configuration

MAC Configuration

Interface Isolation Group Configuration

STP Configuration

Loopback Detection Configuration

Ethernet Switching

IPv4 Configuration

ARP Configuration

ARP To Host Routing Configuration

IPv6 Configuration

IP Service

Static Route Configuration

OSPFv2 Configuration

OSPFv3 Configuration

Route Map

Policy Route Configuration

IP Unicast Routing

PIM Configuration

IP Multicast

Command Line Reference