No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S7700 and S9700 V200R011C10

This document describes the configurations of Security, including ACL, reflective ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, separating the management plane from the service plane, security risks.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Attack Defense Packet Types

Attack Defense Packet Types

The listed attack defense packet types are only for your reference. To view the attack defense packet types supported by the switch, run the display cpu-defend configuration slot slot-id command.

S7700

Packet Type Explanation
8021x 802.1X packet
8021x-ident 802.1X identity packet
8021x-ident-wlan 802.1X identity wlan packet
8021x-start 802.1X start packet
8021x-start-wlan 802.1X start wlan packet
8021x-wireless 802.1X wireless packet
arp-mff MFF ARP packet
arp-miss ARP MISS packet
arp-reply ARP reply packet
arp-request ARP Request packet
asdp ASDP packet
bfd BFD packet
bgp BGP packet
bgp4plus BGP4PLUS packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ap-auth Authentication packet sent by a remote unit (RU) when registering with a central AP
capwap-association CAPWAP association packet
capwap-disassoc CAPWAP disassoc packet
capwap-discov-bc CAPWAP-discovery-broadcast packet
capwap-discov-uc CAPWAP-discovery-unicast packet
capwap-echo CAPWAP echo packet
capwap-keepalive CAPWAP keepalive packet
capwap-regular-rep Packet reported by an AP regularly
capwap-rf-neighbor CAPWAP radio calibration packet
capwap-smart-roam CAPWAP packets transmitted during smart roaming
capwap-other CAPWAP-OTHER packet
cdp CDP packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
dldp DLDP packet
eap-key EAP-KEY packet used in WPA/WPA2 PSK mode
easy-operation Easy operation packet
eoam-1ag Eth-OAM 1ag packet
eoam-1ag-lblt Eth-OAM 1ag lblt packet
eoam-3ah Eth-OAM 3ah packet
erps-port ERPS port packet
fib-hit Host route hit packet
fib-miss Host route miss packet
fib6-hit IPv6 FIB HIT packet
ftp FTP packet
gre-keepalive GRE keepalive packet
gvrp GVRP packet
hopbyhop IPv6 hopbyhop packet
hop-limit HOPLIMIT packet
http HTTP packet
https HTTPS packet
https-other HTTPS-OTHER packet
https-syn HTTPS-SYN packet
hvrp HVRP packet
hw-tacacs HW-TACACS packet
icmp ICMP packet
icmp-ttl-expired ICMP TTL expired packet
icmpv6 ICMPv6 packet
igmp IGMP packet
ip-cloud NETCONF packet
ipfpm IPFPM packet
ipmc-invalid IPMC invalid packet
ipsec-ah IPSec ah packet
ipsec-esp IPSec esp packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lldp LLDP packet
lnp LNP packet
lync LYNC packet
mad MAD packet
mdns MDNS packet
mld MLD packet
mpls-fib-hit Route hit packet after MPLS label terminated
mpls-ldp MPLS LDP packet
mpls-oam MPLS OAM packet
mpls-one-label MPLS label-alert packet
mpls-ping MPLS PING packet
mpls-rsvp MPLS RSVP packet
mpls-ttl-expired MPLS TTL expired packet
mpls-vccv-ping MPLS VCCV PING packet
nac-arp-reply ARP reply packet for NAC
nac-arp-request ARP Request packet for NAC
nac-dhcpv6 DHCPV6 packet for NAC
nac-http HTTP packet for NAC
nac-nd ND packet for NAC
nd IPv6 ND packet
nd-miss ND MISS packet
ntdp NTDP packet
ntp NTP packet
ospf OSPF packet
ospf-hello OSPF Hello packet
ospfv3 OSPFv3 packet
pim PIM packet
pimv6 PIMv6 packet
portal Portal packet
pppoe PPPOE packet
pppoe-discovery PPPOE-DISCOVERY packet
pppoe-padi PPPOE-PADI packet
pppoe-session PPPOE-SESSION packet
radius RADIUS packet
rip RIP packet
ripng RIPng packet
rrpp RRPP packet
sep-global SEP global packet
sep-port SEP port packet
smart-link Smart link packet
snmp SNMP packet
ssh SSH packet
stp STP packet
tcp TCP packet
telnet Telnet packet
ttl-expired IPv4 TTL expired packet
twamp TWAMP packet
udp-helper UDP helper packet
unknown-multicast Unknown multicast packet
unknown-packet Unknown packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vcmp vcmp packet
vpls-arp ARP packet over VPLS
vpls-dhcp-reply DHCP reply packet over VPLS
vpls-dhcp-request DHCP request packet over VPLS
vpls-igmp IGMP packet over VPLS
vrrp VRRP packet
vrrp6 VRRP6 packet
wapi WAPI packet
y1731 Y.1731 packet

S9700

Packet Type Explanation
8021x 802.1X packet
8021x-ident 802.1X identity packet
8021x-ident-wlan 802.1X identity wlan packet
8021x-start 802.1X start packet
8021x-start-wlan 802.1X start wlan packet
8021x-wireless 802.1X wireless packet
arp-mff MFF ARP packet
arp-miss ARP MISS packet
arp-reply ARP reply packet
arp-request ARP Request packet
asdp ASDP packet
bfd BFD packet
bgp BGP packet
bgp4plus BGP4PLUS packet
bpdu BPDU packet
bpdu-tunnel BPDU Tunnel packet
capwap-ap-auth Authentication packet sent by a remote unit (RU) when registering with a central AP
capwap-association CAPWAP association packet
capwap-disassoc CAPWAP disassoc packet
capwap-discov-bc CAPWAP-discovery-broadcast packet
capwap-discov-uc CAPWAP-discovery-unicast packet
capwap-echo CAPWAP echo packet
capwap-keepalive CAPWAP keepalive packet
capwap-regular-rep Packet reported by an AP regularly
capwap-rf-neighbor CAPWAP radio calibration packet
capwap-smart-roam CAPWAP packets transmitted during smart roaming
capwap-other CAPWAP-OTHER packet
cdp CDP packet
dhcp-client DHCP client packet
dhcp-server DHCP server packet
dhcpv6-reply DHCPv6 reply packet
dhcpv6-request DHCPv6 request packet
dldp DLDP packet
eap-key EAP-KEY packet used in WPA/WPA2 PSK mode
easy-operation Easy operation packet
eoam-1ag Eth-OAM 1ag packet
eoam-1ag-lblt Eth-OAM 1ag lblt packet
eoam-3ah Eth-OAM 3ah packet
erps-port ERPS port packet
fib-miss Host route hit packet
fib6-hit IPv6 FIB HIT packet
fib-hit Host route hit packet
ftp FTP packet
gre-keepalive GRE keepalive packet
gvrp GVRP packet
hopbyhop IPv6 hopbyhop packet
hop-limit HOPLIMIT packet
http HTTP packet
https HTTPS packet
https-other HTTPS-OTHER packet
https-syn HTTPS-SYN packet
hvrp HVRP packet
hw-tacacs HW-TACACS packet
icmp ICMP packet
icmp-ttl-expired ICMP TTL expired packet
icmpv6 ICMPv6 packet
igmp IGMP packet
ipfpm IPFPM packet
ipmc-invalid IPMC invalid packet
ipsec-ah IPSec ah packet
ipsec-esp IPSec esp packet
isis ISIS packet
lacp LACP packet
ldt LDT packet
lldp LLDP packet
lnp LNP packet
lync LYNC packet
mad MAD packet
mdns MDNS packet
mld MLD packet
mpls-fib-hit Route hit packet after MPLS label terminated
mpls-ldp MPLS LDP packet
mpls-oam MPLS OAM packet
mpls-one-label MPLS label-alert packet
mpls-ping MPLS PING packet
mpls-rsvp MPLS RSVP packet
mpls-ttl-expired MPLS TTL expired packet
mpls-vccv-ping MPLS VCCV PING packet
nac-arp-reply ARP reply packet for NAC
nac-arp-request ARP Request packet for NAC
nac-dhcpv6 DHCPV6 packet for NAC
nac-http HTTP packet for NAC
nac-nd ND packet for NAC
nd IPv6 ND packet
nd-miss ND MISS packet
ntdp NTDP packet
ntp NTP packet
ospf OSPF packet
ospf-hello OSPF Hello packet
ospfv3 OSPFv3 packet
pim PIM packet
pimv6 PIMv6 packet
portal Portal packet
pppoe PPPOE packet
pppoe-discovery PPPOE-DISCOVERY packet
pppoe-padi PPPOE-PADI packet
pppoe-session PPPOE-SESSION packet
radius RADIUS packet
rip RIP packet
ripng RIPng packet
rrpp RRPP packet
sep-global SEP global packet
sep-port SEP port packet
smart-link Smart link packet
snmp SNMP packet
ssh SSH packet
stp STP packet
tcp TCP packet
telnet Telnet packet
ttl-expired IPv4 TTL expired packet
twamp TWAMP packet
udp-helper UDP helper packet
unknown-multicast Unknown multicast packet
unknown-packet Unknown packet
vbst VBST packet
vbst-trunk VBST packet for Eth-trunk
vcmp vcmp packet
vpls-arp ARP packet over VPLS
vpls-dhcp-reply DHCP reply packet over VPLS
vpls-dhcp-request DHCP request packet over VPLS
vpls-igmp IGMP packet over VPLS
vrrp VRRP packet
vrrp6 VRRP6 packet
wapi WAPI packet
y1731 Y.1731 packet
Translation
Download
Updated: 2019-04-01

Document ID: EDOC1000178319

Views: 146105

Downloads: 78

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next