Chapter 14 Access Security Configuration
Configuration Data
lists the configuration data of the ARP anti-spoofing.
Table 14-6 Configuration Data of ARP Anti-Spoofing
Item
Data
ARP anti-spoofing status
Enable
VLAN ID
200
Direction
User port
Steps
1.
Enable the global ARP anti-spoofing function.
ZXAN(config)#ip-service arp-anti-spoofing enable
2.
Configure the ARP anti-spoofing function on the VLAN.
ZXAN(config)#ip-service arp-anti-spoofing vlan 200 direction user-port
3.
(Optional) Query the configuration of ARP anti-spoofing.
ZXAN(config)#show ip-service arp-anti-spoofing
Arp Anti-Spoofing status: Enabled
vlan
direction
200
user-port
– End of Steps –
14.4 Configuring the Split Horizon
When user communication control is enabled, only subscribers in the specific VLAN and
SVLAN can communicate with each other.
Context
The ZXA10 C300 supports the following split horizon features:
l
Subscriber separation/intercommunication
l
Subscriber intercommunication based on SVLAN and CVLAN
Steps
1.
Enable the user communication control function.
ZXAN(config)#security user-communication control enable
2.
Configure the intercommunication VLANs.
ZXAN(config)#security user-communication svlan 300 cvlan 200
3.
(Optional) Query the configuration of intercommunication VLANs.
ZXAN(config)#show security user-communication
usercommunication item:
14-11
SJ-20130520164529-007|2013-06-30 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXA10 C300
Страница 8: ...VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 294: ...Tables This page intentionally left blank VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 301: ...Glossary VoIP Voice over Internet Protocol XIII SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...