Intellinet 560931, Руководство пользователя

Страница: 170 / 281

170
Edit one ACE:
Security/Network/ACL>add 1 port 1-5 policy 2 8 any
ACE ID 1 modified last
Result:
ID Type Port Policy Frame Action Rate L. Port C. Mirror Counter
-- ------- -------- -------- ----- ------ -------- -------- -------- -------
1 User 1-5 2 /0x8 Any Permit Disabled Disabled Disabled 0
2 User 6-10 3 /0x8 IP Permit Disabled Disabled Disabled 0
DHCP
DHCP Snooping
Syntax:
Security Network DHCP Snooping Mode [enable|disable]
Security Network DHCP Snooping Port Mode [<port_list>]
[trusted|untrusted]
Security Network DHCP Snooping Statistics [<port_list>]
[clear]
Example:
Security/Network>dhcp snooping mode en
Security/Network>dhcp snooping port mode 1 tru
(Port 1)
Security/Network>dhcp snooping port mode 1-10 tru (Port
1-10)
DHCP Relay
Syntax:
Security Network DHCP Relay Mode [enable|disable]
Security Network DHCP Relay Server [<ip_addr>]
Security Network DHCP Relay Information Mode
[enable|disable]
Security Network DHCP Relay Information Policy
[replace|keep|drop]
Example:
Security/Network>dhcp relay server 192.168.2.100
Security/Network>dhcp relay mode en
(Assign one Server IP before enable the Relay mode)
Security/Network>dhcp rel info mode en
Security/Network>dhcp rel info policy keep
IP Source Guard
IP Source Guard
Configuration
Syntax:
Security Network IP Source Guard Configuration
Security Network IP Source Guard Mode [enable|disable]
Security Network IP Source Guard Port Mode [<port_list>]
[enable|disable]
Security Network IP Source Guard limit [<port_list>]
[<dynamic_entry_limit>|unlimited]
Security Network IP Source Guard Entry [<port_list>]
add|delete <vid> <allowed_ip> <allowed_mac>
Security Network IP Source Guard Status [<port_list>]
Security Network IP Source Guard Translation
Example:
Security/Network>ip source guard mode en
Security/Network>ip source guard port mode 1-10 en
(Port
1-10)