Edge-Core AS5700-54X, Справочное руководство CLI, Страница: 255 / 1116

– 255 –
8
General Security Measures
This switch provides port-based traffic segmentation to segregate traffic for clients
attached to each of the data ports.
Table 48: General Security Commands
Command Group Function
Port Security
*
* The priority of execution for these filtering commands is Port Security, Port Authentication,
Network Access, Web Authentication, Access Control Lists, DHCP Snooping, and then IP Source
Guard.
Configures secure addresses for a port
802.1X Port
Authentication
*
Configures host authentication on specific ports using 802.1X
Network Access * Configures MAC authentication and dynamic VLAN assignment
Web Authentication * Configures Web authentication
Access Control Lists * Provides filtering for IP frames (based on address, protocol, TCP/UDP port
number or TCP control code) or non-IP frames (based on MAC address or
Ethernet type)
DHCPv4 Snooping * Filters untrusted DHCPv4 messages on unsecure ports by building and
maintaining a DHCPv4 snooping binding table
DHCPv6 Snooping * Filters untrusted DHCPv6 messages on unsecure ports by building and
maintaining a DHCPv6 snooping binding table
IPv4 Source Guard * Filters IPv4 traffic on insecure ports for which the source address cannot
be identified via DHCPv4 snooping nor static source bindings
IPv6 Source Guard * Filters IPv6 traffic on insecure ports for which the source address cannot
be identified via DHCPv6 snooping nor static source bindings
ND Snooping Maintains IPv6 prefix table and user address binding table which can be
used for stateless address auto-configuration or for address filtering by
IPv6 Source Guard
ARP Inspection Validates the MAC-to-IP address bindings in ARP packets
Port-based Traffic
Segmentation Configures traffic segmentation for different client sessions based on
specified downlink and uplink ports