No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S1720, S2700, S5700, and S6720 V200R011C10

This document describes the configurations of Security, including ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, Port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, MPAC, separating the management plane from the service plane, security risks, PKI.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Security Features Supported in This Version

Security Features Supported in This Version

The configuration modes supported by different models are as follows:
  • S1720GW (without license), S1720GWR (without license) and S1720X (without license): Web Configuration (For the web configuration, see S1720GW, S1720GWR, S1720X, S1720GW-E, S1720GWR-E, and S1720X-E V200R011C10 Web System Guide.)
  • S1720GW (license loaded), S1720GWR (license loaded), S1720X (license loaded), S1720GW-E (license loaded), S1720GWR-E (license loaded) and S1720X-E (license loaded): Web Configuration (For the web configuration, see S1720GW, S1720GWR, S1720X, S1720GW-E, S1720GWR-E, and S1720X-E V200R011C10 Web System Guide) and CLI. CLI configuration supports the following features.
  • Other models: Web Configuration (For the web configuration, see S1720GFR, S2700, S5700, and S6720 V200R011C10 Web System Guide) and CLI. CLI configuration supports the following features.

Feature

S1720GFR

S1720GW

S1720GWR

S1720X

S1720GW-E

S1720GWR-E

S1720X-E

S2720EI

S2750EI

S5700LI

S5700S-LI

S5710-X-LI

S5720LI

S5720S-LI

S5720SI

S5720S-SI

S5730SI

S5730S-EI

S5720EI

S5720HI

S6720LI

S6720S-LI

S6720SI

S6720S-SI

S6720EI

S6720S-EI

ACL

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Local attack defense

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Attack defense

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

MFF

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Traffic suppression and storm control

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

ARP security

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Port security

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

DHCP snooping

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

ND snooping

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

PPPoE+

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

IP source guard (IPSG)

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Smart Application on Virtual Infrastructure (SAVI)

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Unicast reverse path forwarding (URPF)

Not supported

Not supported

Not supported

Not supported

Supported

Supported

Not supported

Supported

Supported

Keychain

Not supported

Not supported

Not supported

Not supported

Not supported

Supported

Not supported

Not supported

Supported

MPAC

Not supported

Not supported

Not supported

Not supported

Not supported

Supported

Not supported

Not supported

Supported

Service and management isolation

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Security risk query

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

Supported

PKI

Not supported

Not supported

Not supported

Supported, and need to be switched to cloud-based management mode

Only supported by the S5720SI and S5720S-SI, and need to be switched to cloud-based management mode

Supported

Not supported

Not supported

Supported

Related Content

Support Community

Security Issues

Translation
Download
Updated: 2019-09-23

Document ID: EDOC1000178177

Views: 232570

Downloads: 747

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next