No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S1720, S2700, S5700, and S6720 V200R011C10

This document describes the configurations of Security, including ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, Port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, MPAC, separating the management plane from the service plane, security risks, PKI.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Attack Defense Packet Types

Attack Defense Packet Types

The listed attack defense packet types are only for your reference. To view the attack defense packet types supported by the switch, run the display cpu-defend configuration slot slot-id command.

S1720GFR

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S1720X/S1720X-E

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bfd BFD packet
bgp BGP packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pim PIM packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
udp-helper UDP helper packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S2720EI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S2750EI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk

S5700LI/S5700S-LI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk

S5710-X-LI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk

S1720GW/S1720GWR/S1720GW-E/S1720GWR-E

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S5720LI/S5720S-LI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S5720SI/S5720S-SI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bfd BFD packet
bgp BGP packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pim PIM packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
udp-helper UDP helper packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S5720EI

Packet Type Explanation
8021x 802.1X packet
8021x-ident 802.1X identity packet
8021x-start 802.1X start packet
arp-mff MFF ARP packet
arp-miss ARP MISS packet
arp-reply ARP reply packet
arp-request ARP Request packet
asdp ASDP packet
asdp-port ASDP port packet
bfd BFD packet
bgp BGP packet
bgp4plus BGP4PLUS packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
cdp CDP packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
dldp DLDP packet
dns DNS packet
easy-operation Easy operation packet
eoam-1ag Eth-OAM 1ag packet
eoam-1ag-lblt Eth-OAM 1ag lblt packet
eoam-3ah Eth-OAM 3ah packet
erps-port ERPS port packet
fib-hit Host route hit packet
fib-miss Host route miss packet
ftp FTP packet
gre-keepalive GRE keepalive packet
gvrp GVRP packet
hopbyhop IPv6 hopbyhop packet
hop-limit HOPLIMIT packet
http HTTP packet
https HTTPS packet
hw-tacacs HW-TACACS packet
icmp ICMP packet
icmp-ttl-expired ICMP TTL expired packet
icmpv6 ICMPv6 packet
igmp IGMP packet
ike Internet Key Exchange packet
ip-cloud NETCONF packet
ipsec-ah IPSec ah packet
ipsec-esp IPSec esp packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lldp LLDP packet
lnp LNP packet
loopbacktest Loopback-test packet
mad MAD packet
mdns MDNS packet
mld MLD packet
mpls-fib-hit Route hit packet after MPLS label terminated
mpls-ldp MPLS LDP packet
mpls-one-label MPLS label-alert packet
mpls-ping MPLS PING packet
mpls-rsvp MPLS RSVP packet
mpls-ttl-expired MPLS TTL expired packet
mpls-vccv-ping MPLS VCCV PING packet
nac-arp-reply ARP reply packet for NAC
nac-arp-request ARP Request packet for NAC
nac-dhcpv6 DHCPV6 packet for NAC
nac-nd ND packet for NAC
nd IPv6 ND packet
ntdp NTDP packet
ntp NTP packet
ospf OSPF packet
ospf-hello OSPF Hello packet
ospfv3 OSPFv3 packet
pim PIM packet
pimv6 PIMv6 packet
portal Portal packet
pppoe PPPOE packet
radius RADIUS packet
rip RIP packet
ripng RIPng packet
rrpp RRPP packet
sep-global SEP global packet
sep-port SEP port packet
smart-link Smart link packet
snmp SNMP packet
ssh SSH packet
stp STP packet
tcp TCP packet
telnet Telnet packet
ttl-expired IPv4 TTL expired packet
twamp TWAMP packet
udp-helper UDP helper packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vcmp VCMP packet
vpls-igmp IGMP packet over VPLS
vrrp VRRP packet
vrrp6 VRRP6 packet
y1731 Y.1731 packet

S5720HI

Packet Type Explanation
8021x 802.1X packet
8021x-ident 802.1X identity packet
8021x-ident-wlan 802.1X identity wlan packet
8021x-start 802.1X start packet
8021x-start-wlan 802.1X start wlan packet
8021x-wireless 802.1X wireless packet
arp-mff MFF ARP packet
arp-miss ARP MISS packet
arp-reply ARP reply packet
arp-request ARP Request packet
asdp ASDP packet
bfd BFD packet
bgp BGP packet
bgp4plus BGP4PLUS packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ap-auth Authentication packet sent by a remote unit (RU) when registering with a central AP
capwap-association CAPWAP association packet
capwap-disassoc CAPWAP disassoc packet
capwap-discov-bc CAPWAP-discovery-broadcast packet
capwap-discov-uc CAPWAP-discovery-unicast packet
capwap-echo CAPWAP echo packet
capwap-keepalive CAPWAP keepalive packet
capwap-regular-rep Packet reported by an AP regularly
capwap-rf-neighbor CAPWAP radio calibration packet
capwap-smart-roam CAPWAP packets transmitted during smart roaming
capwap-other CAPWAP-OTHER packet
cdp CDP packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
dldp DLDP packet
dns DNS packet
eap-key EAP-KEY packet used in WPA/WPA2 PSK mode
easy-operation Easy operation packet
eoam-1ag Eth-OAM 1ag packet
eoam-1ag-lblt Eth-OAM 1ag lblt packet
eoam-3ah Eth-OAM 3ah packet
erps-port ERPS port packet
fib-hit Host route hit packet
fib-miss Host route miss packet
fib6-hit IPv6 FIB HIT packet
ftp FTP packet
gre-keepalive GRE keepalive packet
gvrp GVRP packet
hopbyhop IPv6 hopbyhop packet
hop-limit HOPLIMIT packet
http HTTP packet
https HTTPS packet
https-other HTTPS-OTHER packet
https-syn HTTPS-SYN packet
hw-tacacs HW-TACACS packet
icmp ICMP packet
icmp-ttl-expired ICMP TTL expired packet
icmpv6 ICMPv6 packet
igmp IGMP packet
ike Internet Key Exchange packet
ip-cloud NETCONF packet
ipfpm IPFPM packet
ipsec-esp IPSec esp packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lldp LLDP packet
lnp LNP packet
loopbacktest Loopback-test packet
lync LYNC packet
mad MAD packet
mdns MDNS packet
mld MLD packet
mpls-fib-hit Route hit packet after MPLS label terminated
mpls-ldp MPLS LDP packet
mpls-one-label MPLS label-alert packet
mpls-ping MPLS PING packet
mpls-rsvp MPLS RSVP packet
mpls-ttl-expired MPLS TTL expired packet
mpls-vccv-ping MPLS VCCV PING packet
nac-arp-reply ARP reply packet for NAC
nac-arp-request ARP Request packet for NAC
nac-dhcpv6 DHCPV6 packet for NAC
nac-http HTTP packet for NAC
nac-nd ND packet for NAC
nd IPv6 ND packet
nd-miss ND MISS packet
ntdp NTDP packet
ntp NTP packet
ospf OSPF packet
ospf-hello OSPF Hello packet
ospfv3 OSPFv3 packet
pim PIM packet
pimv6 PIMv6 packet
portal Portal packet
pppoe PPPOE packet
radius RADIUS packet
rip RIP packet
ripng RIPng packet
rrpp RRPP packet
sep-global SEP global packet
sep-port SEP port packet
smart-link Smart link packet
snmp SNMP packet
ssh SSH packet
stp STP packet
tcp TCP packet
telnet Telnet packet
ttl-expired IPv4 TTL expired packet
twamp TWAMP packet
udp-helper VCMP packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vcmp VCMP packet
vpls-arp ARP packet over VPLS
vpls-dhcp-reply DHCP reply packet over VPLS
vpls-dhcp-request DHCP request packet over VPLS
vpls-igmp IGMP packet over VPLS
vrrp VRRP packet
vrrp6 VRRP6 packet
wapi WAPI packet
y1731 Y.1731 packet

S6720LI/S6720S-LI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S6720SI/S6720S-SI/S5730SI/S5730S-EI

Packet Type Explanation
8021x 802.1X packet
arp-reply ARP reply packet
arp-request ARP Request packet
bfd BFD packet
bgp BGP packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
eth-ring SMLK RRPP SEP ERPS packet
fib-hit Host route hit packet
ftp FTP packet
https HTTPS packet
icmp ICMP packet
igmp IGMP packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lnp LNP packet
nd IPv6 ND packet
ospf OSPF packet
pim PIM packet
pppoe PPPOE packet
rip RIP packet
stp STP packet
telnet Telnet packet
udp-helper UDP helper packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vrrp VRRP packet

S6720EI/S6720S-EI

Packet Type Explanation
8021x 802.1X packet
8021x-ident 802.1X identity packet
8021x-start 802.1X start packet
arp-mff MFF ARP packet
arp-miss ARP MISS packet
arp-reply ARP reply packet
arp-request ARP Request packet
asdp ASDP packet
asdp-port ASDP port packet
bfd BFD packet
bgp BGP packet
bgp4plus BGP4PLUS packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ctrl CAPWAP control packet
cdp CDP packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
dldp DLDP packet
dns DNS packet
easy-operation Easy operation packet
eoam-1ag Eth-OAM 1ag packet
eoam-1ag-lblt Eth-OAM 1ag lblt packet
eoam-3ah Eth-OAM 3ah packet
erps-port ERPS port packet
fib-hit Host route hit packet
fib-miss Host route miss packet
ftp FTP packet
gre-keepalive GRE keepalive packet
gvrp GVRP packet
hop-limit HOPLIMIT packet
http HTTP packet
https HTTPS packet
hw-tacacs HW-TACACS packet
icmp ICMP packet
icmp-ttl-expired ICMP TTL expired packet
icmpv6 ICMPv6 packet
igmp IGMP packet
ike Internet Key Exchange packet
ip-cloud NETCONF packet
ipsec-ah IPSec ah packet
ipsec-esp IPSec esp packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lldp LLDP packet
lnp LNP packet
loopbacktest Loopback-test packet
mad MAD packet
mdns MDNS packet
mld MLD packet
mpls-fib-hit Route hit packet after MPLS label terminated
mpls-ldp MPLS LDP packet
mpls-one-label MPLS label-alert packet
mpls-ping MPLS PING packet
mpls-rsvp MPLS RSVP packet
mpls-ttl-expired MPLS TTL expired packet
mpls-vccv-ping MPLS VCCV PING packet
nac-arp-reply ARP reply packet for NAC
nac-arp-request ARP Request packet for NAC
nac-dhcpv6 DHCPV6 packet for NAC
nac-nd ND packet for NAC
nd IPv6 ND packet
ntdp NTDP packet
ntp NTP packet
ospf OSPF packet
ospf-hello OSPF Hello packet
ospfv3 OSPFv3 packet
pim PIM packet
pimv6 PIMv6 packet
portal Portal packet
pppoe PPPOE packet
radius RADIUS packet
rip RIP packet
ripng RIPng packet
rrpp RRPP packet
sep-global SEP global packet
sep-port SEP port packet
smart-link Smart link packet
snmp SNMP packet
ssh SSH packet
stp STP packet
tcp TCP packet
telnet Telnet packet
ttl-expired IPv4 TTL expired packet
twamp TWAMP packet
udp-helper UDP helper packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vcmp VCMP packet
vpls-igmp IGMP packet over VPLS
vrrp VRRP packet
vrrp6 VRRP6 packet
y1731 Y.1731 packet
Translation
Download
Updated: 2019-03-28

Document ID: EDOC1000178177

Views: 220047

Downloads: 712

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next