No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FAQ-How to configure anti-macspoofing features on MA5652

Publication Date:  2012-07-25 Views:  87 Downloads:  0
Issue Description

Q:

Howto configure  anti-macspoofing features on MA5652?

Configuration the anti-macspoofing function.
If this feature is only enabled globally using the command bellow the function will work:
security anti-macspoofing enable

Alarm Information
Null
Handling Process

Q:

1. First, enable the global mac spoofing function in the config mode.
MA5652(config)#security                                                         
{ anti-dos<K>|anti-icmpattack<K>|anti-ipattack<K>|anti-ipspoofing<K>|anti-macspo
ofing<K>|arp-detect<K>|mac-filter<K>|pppoe<K>|source-route<K> }:anti-macspoofing 
{ disable<K>|enable<K> }:enable                                                 
                                                                                
  Command:                                                                      
          security anti-macspoofing enable                                       
                                                                                                                 
2. Configure the vlan service profile that should be enabled the mac spoofing fuction.                                                                                
MA5652(config)#vlan service-profile                                             
{ profile-id<K>|profile-name<K> }:profile-id 10                                 
{ <cr>|profile-name<K> }:                                                       
                                                                                
  Command:                                                                      
          vlan service-profile profile-id 10                                    
                                                                                
MA5652(config-vlan-srvprof-10)#security                                         
{ anti-ipspoofing<K>|anti-macspoofing<K> }:anti-macspoofing                      
{ disable<K>|enable<K> }:enable                                                 
                                                                                
  Command:                                                                      
          security anti-macspoofing enable                                       
  Info: Please use the commit command to make modifications take effect         
                                                                                
MA5652(config-vlan-srvprof-10)#commit    //must execute the commit command                                        
                                                                                
MA5652(config-vlan-srvprof-10)#quit                                             
                                                                                                                 
3. Use the vlan service profile configured as above to bind the service vlan which you want to use the mac spoofing function.                                                                                
MA5652(config)#vlan bind service-profile                                        
{ vlan-list<S><Length 1-256> }:2004                                             
{ profile-id<K>|profile-name<K> }:profile-id                                    
{ profile-id<U><1,32> }:10                                                      
                                                                                
  Command:                                                                      
          vlan bind service-profile 2004 profile-id 10

Root Cause

Null

Suggestions
Null

END