Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 632 / 943

Configuration Guide Port-based Flow Control Configuration
You can also only show the secure address on one interface. The instance below shows the secure
address on interface gigabitsethernet 0/3.
Ruijie# show port-security address interface gigabitethernet 0/3
Vlan Mac Address IP Address Type Port Remaining Age(mins)
---- --------------- ---------- ------ ------------------
1 00d0.f800.073c 192.168.12.202 Configured Gi0/3 8
The example below shows the statistic information of the secure port.
Ruijie# show port-security
Secure Port MaxSecureAddr(count) CurrentAddr(count) Security Action
-------- ----------------- ----------------- ------------
Gi0/1 128 1 Restrict
Gi0/2 128 0 Restrict
Gi0/3 8 1 Protect
ARP-CHECK
Overview
ARP-Check function filters all ARP packets on the logic interface and dropps all illegal ARP packets,
avoiding the ARP fraud in the network and improving the network stability.
Ruijie switches support multiple IP security application(such as IP Source Guard, globle IP+MAC
binding, port security, ect), which effectively filter the user IP packets and avoid the illegal user to use
the network resources. The ARP check function generates the corresponding ARP filtering
information accoding to the legel user information (IP or IP+MAC), implementing the illegal ARP
packet filtering in the network.
ARP Check and other security functions
As shown in the above figure, ARP Check function checks whether the Sender IP field or the <Sender
IP, Sender MAC> field of all ARP packets on the logic interface matches with the legal user