huawei(config-vlan-srvprof-2)#
quit
huawei(config)#
vlan bind service-profile 10 profile-id 2
To enable anti-MAC spoofing for VLAN 10, and set the maximum number of MAC addresses
that can be bound to service port 2 to 7, do as follows:
huawei(config)#
security anti-macspoofing enable
huawei(config)#
vlan service-profile profile-id 2
huawei(config-vlan-srvprof-2)#
security anti-macspoofing enable
Info: Please use the commit command to make modifications take effect
huawei(config-vlan-srvprof-2)#
commit
huawei(config-vlan-srvprof-2)#
quit
huawei(config)#
vlan bind service-profile 10 profile-id 2
huawei(config)#
security anti-macspoofing max-mac-count service-port 2 7
To enable anti-MAC duplicate so that the user that goes online first will not be affected when
MAC address conflicts occur between different users, do as follows:
huawei(config)#
security anti-macduplicate enable
huawei(config)#
display security config
Anti-ipspoofing function : disable
Anti-dos function : disable
Anti-macspoofing function : disable
Anti-ipattack function : disable
Anti-icmpattack function : disable
Source-route filter function : disable
Anti-macduplicate function : enable
PPPoE Overall Aging Time(sec) : 360
PPPoE Aging Period (sec) : 90
ARP detect mode : dummy
3.12 Configuring AAA
This topic describes how to configure the AAA on the MA5616, including configuring the
MA5616 as the local and remote AAA servers.
Context
AAA refers to authentication, authorization, and accounting. In the process that a user accesses
network resources, through AAA, certain rights are authorized to the user if the user passes
authentication, and the original data about the user accessing network resources is recorded.
l
Authentication: Checks whether a user is allowed to access network resources.
l
Authorization: Determines what network resources a user can access.
l
Accounting: Records the original data about the user accessing network resources.
Application Context
AAA is generally applied to the users that access the Internet in the PPPoA, PPPoE, 802.1x,
VLAN, WLAN, ISDN, or Admin Telnet (associating the user name and the password with the
domain name) mode.
NOTE
In the existing network, 802.1x and Admin Telnet correspond to the local AAA, that is, the MA5616
functions as a local AAA server; PPPoE corresponds to the remote AAA, that is, the MA5616 functions
as the client of a remote AAA server.
shows an example network of the AAA application.
SmartAX MA5616 Multi-service Access Module
Configuration Guide
3 Basic Configuration
Issue 04 (2011-10-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
94