Ruijie RG-S2900G-E Series, Configuration Manual

Page: 714 / 943

Configuration Guide NFPP Configuration
Command Function
Ruijie(config-if)# nfpp arp-guard
isolate-period [ seconds | permanent ]
Configure the isolated time on the
port, ranging 0s, 180-86400s(one
day). By default, the isolated time is
configured globally. 0s represents no
isolation. Permanent represents
permanent isolation.
Ruijie(config-if)# end
Return to the privileged EXEC mode.
Ruijie# show nfpp icmp-guard summary Show the parameter settings.
Ruijie# copy running-config
startup-config
Save the configurations.
To restore the global isolated time to the default value, use the no icmp-guard
isolate-period command in the nfpp configuration mode. If the isolated time
has been configured on a port, you can use the no icmp-guard isolate-period
command to remove the port-based isolated time configuration in the interface
configuration mode.
Configuring the monitored time
Without the global and port-based isolated period configured(including set the
interface isolated time 0), the serviceview monitor will be performed to
auto-monitor the attacker according to the configured monitored period,
providing the attacker information in the system. With the global or port-based
isolated period configured, the ICMP-guard will perform hardware isolation
towards the hosts using the serviceview monitor.
Command Function
Ruijie# configure terminal Enter the global configuration mode.
Ruijie(config)# nfpp
Enter the nfpp configuration mode.
Ruijie(config-nfpp)# icmp-guard
monitor-period seconds
Configure the monitored time, ranging
180-86400s(one day). The default
value is 600s.
Ruijie(config-nfpp)# end
Return to the privileged EXEC mode.
Ruijie# show nfpp icmp-guard summary Show the parameter settings.
Ruijie# copy running-config
startup-config
Save the configurations.
To restore the monitored time to the default value, use the no icmp-guard
monitor-period command in the nfpp configuration mode.