Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
IP Security
DHCP Snooping
Context
DHCP snooping allows clients to obtain IP addresses from authorized DHCP servers. The device with DHCP snooping enabled can generate binding entries based on the IP and MAC addresses of DHCP clients.
Procedure
- Choose and click the DHCP Snooping tab, as shown in Figure 5-208.
- Turn on Global status to enable DHCP snooping globally.
By default, DHCP snooping is not enabled globally.
- Click New and select a trusted interface in the displayed dialog box.
- Click Apply to configure the selected interface as a trusted interface.
- Click a record in VLAN List to edit its DHCP snooping status. Turn on DHCP Snooping Status and click
to complete the configuration.
You can also select multiple records and click Enable or Disable to set DHCP snooping status in a batch.
- Choose and click the Interface List tab, as shown in Figure 5-209.
- Select an interface on the Interface List tab page and edit its DHCP snooping status. Turn on DHCP Snooping Status and click
to complete the configuration.
to complete the configuration.
IPSG
Procedure
- Choose and click the IPSG tab, as shown in Figure 5-210.
- Select a port to be configured. Perform the following operations as required in the port area:
- Click a port icon. To deselect the port, click the port icon again.
- Drag the cursor to select consecutive ports in a batch.
- Click multiple port icons to select these ports, and click a port icon again to deselect the port.
- Select a slot where an LPU is located. All ports on the LPU are selected.
- Turn on IPSG status.
- Select an IP packet check item from IPSG matching option.
- Click Apply to complete the configuration.
DAI
Procedure
- Choose and click the DAI tab, as shown in Figure 5-211.
- Select a port to be configured. Perform the following operations as required in the port area:
- Click a port icon. To deselect the port, click the port icon again.
- Drag the cursor to select consecutive ports in a batch.
- Click multiple port icons to select these ports, and click a port icon again to deselect the port.
- Select a slot where an LPU is located. All ports on the LPU are selected.
- Turn on DAI status.
- Select an ARP packet check item from DAI matching option.
- Click Apply to complete the configuration.
Static Binding Table
Context
IPSG based on a static binding table filters out IP packets received by untrusted interfaces, to prevent network access from malicious hosts using stolen IP addresses.
Procedure
- Create a static binding entry.
- Choose and click the Static Binding Table tab, as shown in Figure 5-212.
- Click Create to open the Create a Binging Entry page, as shown in Figure 5-213.
Table 5-112 describes parameters on the displayed page.
- Delete a static binding entry.
- Choose and click the Static Binding Table tab, as shown in Figure 5-212.
- Select a record that you want to delete and click Delete. The system asks you whether to delete the record.
- Click OK.
Dynamic Binding Table
Procedure
- Choose and click the Dynamic Binding Table tab, as shown in Figure 5-214.
- Click Refresh to update dynamic binding entries.
One-Click Binding
Context
After one-click binding is configured, the switch can generate
static user binding entries based on ARP entry information. This function
improves efficiency of user static binding entry creation.
Procedure
- Configure static user binding entries based on ARP entry
information.
- Choose . The One-Click Binding page is displayed, as shown in Figure 5-215.
- Delete the user static binding entries generated based
on ARP entries.
- Choose . The One-Click Binding page is displayed, as shown in Figure 5-215.
- To unbind one static user binding entry, click Unbind; to unbind multiple static user binding entries, select the entries you want to unbind and click One-Click unbind.
