3Com 4510G, Руководство по настройке

Страница: 204 / 1166

ii
Enabling ARP Defense Against IP Packet Attacks ·········································································4-2
Configuring ARP Active Acknowledgement ····························································································4-2
Introduction······································································································································4-2
Configuring the ARP Active Acknowledgement Function ·······························································4-3
Configuring Source MAC Address Based ARP Attack Detection···························································4-3
Introduction······································································································································4-3
Configuration Procedure··················································································································4-3
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························4-4
Configuring ARP Packet Source MAC Address Consistency Check ·····················································4-4
Introduction······································································································································4-4
Configuring ARP Packet Source MAC Address Consistency Check··············································4-5
Configuring ARP Packet Rate Limit ········································································································4-5
Introduction······································································································································4-5
Configuring the ARP Packet Rate Limit Function ···········································································4-5
Configuring ARP Detection ·····················································································································4-5
Introduction to ARP Detection ·········································································································4-5
Enabling ARP Detection Based on DHCP Snooping Entries/802.1X Security Entries/Static
IP-to-MAC Bindings ·························································································································4-6
Configuring ARP Detection Based on Specified Objects ································································4-8
Displaying and Maintaining ARP Detection·····················································································4-9
ARP Detection Configuration Example I ·························································································4-9
ARP Detection Configuration Example II ······················································································4-10
5 DHCP Overview··········································································································································5-1
Introduction to DHCP ······························································································································5-1
DHCP Address Allocation ·······················································································································5-2
Allocation Mechanisms····················································································································5-2
Dynamic IP Address Allocation Process ·························································································5-2
IP Address Lease Extension ···········································································································5-3
DHCP Message Format ··························································································································5-3
DHCP Options·········································································································································5-4
DHCP Options Overview ·················································································································5-4
Introduction to DHCP Options ·········································································································5-4
Self-Defined Options ·······················································································································5-5
Protocols and Standards·························································································································5-8
6 DHCP Relay Agent Configuration ············································································································6-1
Introduction to DHCP Relay Agent ·········································································································6-1
Application Environment··················································································································6-1
Fundamentals··································································································································6-1
DHCP Relay Agent Support for Option 82 ······················································································6-2
DHCP Relay Agent Configuration Task List ···························································································6-3
Configuring the DHCP Relay Agent········································································································6-3
Enabling DHCP ·······························································································································6-3
Enabling the DHCP Relay Agent on an Interface ···········································································6-4
Correlating a DHCP Server Group with a Relay Agent Interface····················································6-4
Configuring the DHCP Relay Agent Security Functions ·································································6-5
Configuring the DHCP Relay Agent to Send a DHCP-Release Request ·······································6-7
Configuring the DHCP Relay Agent to Support Option 82······························································6-7