12
Q.
How do I prevent gateway spoofing when the router acts as a gateway?
A.
When receiving an ARP packet from the router that acts as a gateway, the router sends a gratuitous
ARP packet to modify the spoofed ARP entries. If a large number of attack packets exist, the router
detects the incoming interface of the attack packets. It captures the packets, obtains the packet
signature, and applies an ACL to the interface to filter out subsequent attack packets.
IP forwarding services
This section contains the most frequently asked questions about IP forwarding services.
Q.
Does the router support cross-card port mirroring?
A.
The local mirroring group supports cross-card port mirroring. The mirroring source and destination
can reside on different cards or interface cards of a router.
Q.
Does the router support remote port mirroring?
A.
No.
Q.
What tunneling technologies does the router support?
A.
The router supports the following tunneling technologies:
•
IPv6 over IPv4 tunneling
—
Enables IPv6 packets to traverse IPv4 networks and enables
isolated IPv6 networks to communicate.
•
IPv4 over IPv4 tunneling/GRE tunneling
—Creates VPN to ensure communication security.
•
MPLS TE tunneling
—Implements traffic engineering to prevent network congestion.
Q.
What protocols and features does BFD support on the router?
A.
BFD supports the following protocols and features:
•
IPv4 routing protocols, including RIP, OSPF, IS-IS, and BGP.
•
IPv6 routing protocols, including OSPFv3, IPv6 IS-IS, and IPv6 BGP.
•
LDP LSP.
•
MPLS TE.
•
Static routing, policy-based routing, and Track.
•
IP FRR and MPLS TE FRR.
•
VRRP.
•
PIM DR.
•
Primary and backup PWs of VPLS.
•
LACP.
•
Interface and subinterface.
Q.
What interfaces can be used for link aggregation?
A.
You can aggregate the physical Ethernet interfaces on an FIP-600 or SAP-4EXP card.
You can aggregate the physical Ethernet interfaces and Layer 3 Ethernet subinterfaces on any card
except an FIP-600 or SAP-4EXP card.
