Dasan V8102 - Page 233

To Next Page

To Previous Page

User Manual UMN:CLI

V8102

233

ipv6 tcp syn-guard BANDWIDTH

Global

Blocks SYN packet toward local CPU.

no ipv6 tcp syn-guard

Configures the system to receive SYN packet toward

local CPU.

Main Page

Default Chapter14
- Table of Contents14
1 Introduction41
- Audience41
- Document Structure41
- Tab. 1.1 Overview of Chapters41
  - Document Convention42
  - Document Notation42
- Tab. 1.2 Command Notation of Guide Book42
2 System Overview45
- Fig. 2.1 Front View of the V810245
  - System Features46
3 Command Line Interface (CLI)49
- Configuration Mode49
  - Privileged EXEC View Mode50
  - Privileged EXEC Enable Mode50
- Tab. 3.1 Main Command of Privileged EXEC View Mode50
- Tab. 3.2 Main Command of Privileged EXEC Enable Mode50
  - Global Configuration Mode51
- Tab. 3.3 Main Command of Global Configuration Mode51
  - Interface Configuration Mode52
- Tab. 3.4 Main Command of DHCP Pool Configuration Mode55
- Tab. 3.5 Main Command of DHCP Option Configuration Mode55
  - Rule Configuration Mode56
  - RMON Configuration Mode56
- Tab. 3.6 Main Command of DHCP Option 82 Configuration Mode56
- Tab. 3.7 Main Command of Rule Configuration Mode56
  - Router Configuration Mode57
  - Route-Map Configuration Mode57
- Tab. 3.8 Main Command of RMON Configuration Mode57
- Tab. 3.9 Main Command of Router Configuration Mode57
  - GPON Configuration Mode58
- Tab. 3.10 Main Command of Route-Map Configuration Mode58
- Tab. 3.11 Main Command of ONU Profile Configuration Mode58
- Tab. 3.12 Main Command of DBA Profile Configuration Mode58
  - Useful Tips59
- Tab. 3.13 Command Abbreviation63
4 System Basic Configuration and Operation64
- Basic Configuration64
- Tab. 4.1 World Time Zone77
5 Equipment/Interface Management86
- Slot Assignment86
- Ius Management86
  - Registering Ius86
- Fig. 5.1 Slot Assignment of V810286
- Tab. 5.1 Port Indices and Slot Assignment86
- Tab. 5.2 Interface Numbering Scheme According to SIU Types90
- Fig. 5.2 Structure of Ipv6 Header98
- Tab. 5.3 Overview of Ipv6 Header Fields99
6 System Environment119
- Environment Configuration119
- Tab. 6.1 CML and SML Capability Comparison125
- Tab. 6.2 Options for Ping128
- Tab. 6.3 Options for Ping for Multiple IP Addresses129
  - IP ICMP Source Routing130
- Fig. 6.1 Ping Test for Network Status130
  - Tracing Packet Route131
- Fig. 6.2 IP Source Routing131
  - Displaying User Connecting to System132
- Tab. 6.4 Options for Tracing Packet Route132
7 Network Management145
- Simple Network Management Protocol (SNMP)145
  - SNMP Service145
  - Restarting SNMP Deamon145
  - SNMP Community145
  - Information of SNMP Agent146
  - SNMP Com2Sec147
  - SNMP Group147
  - SNMP View Record148
  - Permission to Access SNMP View Record148
  - SNMP Version 3 User149
  - SNMP Trap149
  - SNMP Alarm152
  - Displaying SNMP Configuration157
  - Disabling SNMP157
- Link Layer Discovery Protocol (LLDP)159
  - LLDP Operation159
  - Enabling LLDP159
  - LLDP Operation Type159
  - Basic TLV159
  - LLDP Message160
  - Reinitiating Delay160
  - Displaying LLDP Configuration161
- Remote Monitoring (RMON)162
  - RMON History162
  - RMON Alarm164
  - RMON Event167
  - Simple RMON Event Configuration169
- Syslog171
  - Syslog Output Level171
  - Facility Code174
  - Syslog Index175
  - Syslog Bind Address176
  - Debug Message for Remote Terminal176
  - Disabling Syslog176
  - Displaying Syslog Message176
- Uploading Syslog File178
- Displaying Syslog Configuration178
- Operation, Administration and Maintenance (OAM)179
- Fig. 7.1 OAM Deployment Scenario179
- Efm Oam180
  - Enabling EFM OAM180
  - OAM Link Monitoring181
  - EFM OAM Mode182
  - OAM Loopback182
  - OAM Unidirection182
  - Displaying EFM OAM Configuration183
- Ethernet (ITU-T Y.1731) OAM184
- Fig. 7.2 CFM and Y.1731 OAM for End-To-End Visibility184
- Fig. 7.3 Shared MEG Levels185
  - Enabling Y.1731 OAM186
  - Creating Y.1731 Entity186
  - Enabling Y.1731 Entity188
  - Fault Alarm Detection189
  - OAM on Trunk Port189
  - Sender ID TLV189
  - MEG Cross-Check190
  - Ethernet Continuity Check (ETH-CC)190
- Tab. 7.1 ETH-CCM Interval Field Encoding191
  - Ethernet Loopback (ETH-LB)194
  - Ethernet Link Trace (ETH-LT)194
  - Ethernet Alarm Indication Signal (ETH-AIS)196
  - Ethernet Locked Signal (ETH-LCK)197
  - Ethernet Test Signal (ETH-TEST)199
  - Ethernet Frame Loss Measurement (ETH-LM)200
  - Ethernet Frame Delay Measurement (ETH-DM)201
  - Throughput Measurement202
  - Displaying Y.1731 OAM Information203
  - Deleting Y.1731 Database204
  - Ring Automatic Protection Switching (R-APS)205
- Fig. 7.4 Ring Protection in Case of Link Failure206
- Fig. 7.5 Ring Recovery Procedure206
  - Enabling R-APS Node207
  - RPL Port State207
  - RPL Port State Switch208
  - Hold off Time209
  - Guard Time209
  - Wait-To-Restore Time210
  - Wait-To-Block Time210
  - Interconnection Node211
  - R-APS Virtual Channel211
  - Topology Change Propagation212
  - Multiple Failure212
  - Flooding Block212
  - Displaying R-APS Configuration212
  - Uplink Redundancy214
- Fig. 7.6 Uplink Redundancy Deployment Scenario214
  - Enabling/Disabling Uplink Redundancy215
  - Master / Slave Node215
  - Control VLAN216
  - Ring Topology Monitoring216
  - Traffic VLAN217
  - Non-Revertive Mode217
  - Netbios Filtering220
- Fig. 7.7 Netbios Filtering220
  - Martian Filtering221
  - Outband Management Port Security221
  - Port Mirroring221
- Fig. 7.8 Port Mirroring222
  - Max Host223
    - Max New Hosts224
  - MAC Table225
    - Admimistered MAC Address226
  - MAC Filtering227
  - ICMP Message Control228
- Tab. 7.2 ICMP Message Type228
  - Blocking Echo/Bogus Reply Message229
- Fig. 7.9 ICMP Message Structure229
  - Interval for Transmit ICMP Message230
- Tab. 7.3 Mask Calculation of Default Value230
  - ICMP Destination Unreachable Message231
  - TCP Flag Control232
    - RST Configuration232
    - SYN Configuration232
  - Packet Dump234
- Tab. 7.4 Options for Packet Dump235
  - Displaying Dump Packets236
  - Dump File236
  - Access List237
    - Standard Access List238
- Tab. 7.5 Examples of Wildcard Masking238
  - Extended Access List239
  - Named Access List241
  - Named Access List for Ipv6 Address242
  - Access List Range243
  - Access List Filter Configuration243
  - Sflow Monitoring263
8 System Security268
- Address Resolution Protocol (ARP)268
- Fig. 8.1 Proxy ARP277
- Fig. 8.2 Process of 802.1X Authentication300
  - Authentication301
    - Enabling 802.1X301
    - RADIUS Server301
- Fig. 8.3 Multiple Authentication Servers301
9 System Main Functions307
- Virtual Local Area Network (VLAN)307
  - Port-Based VLAN308
- Fig. 9.1 Port-Based VLAN308
  - Creating VLAN309
- Tab. 9.1 Advantages and Disadvantages of Tagged VLAN309
  - Adding a Member Port to VLAN Group310
  - Deleting VLAN311
  - Specifying PVID311
  - Protocol-Based VLAN312
  - Reserved VLAN312
  - VLAN Description313
  - Qinq VLAN Mapping314
- Fig. 9.2 Example of Qinq Configuration314
- Fig. 9.3 Qinq Frame314
  - TPID Configuration315
  - One-To-One VLAN Mapping between S-VID and C-VID315
  - One-To-Two VLAN Mapping between S-VID and C-VID317
  - Two-To-One VLAN Mapping between S-VID and C-VID317
  - Two-To-Two VLAN Mapping between S-VID and C-VID318
  - Double Tagging Operation319
  - Double Tagging Configuration319
  - Inner Tag Configuration320
  - Displaying VLAN Mapping320
  - VLAN Translation320
  - Displaying VLAN Information321
- Link Aggregation (LAG)323
  - Port Trunk323
    - Configuring Port Trunk323
- Fig. 9.4 Link Aggregation323
  - Disabling Port Trunk324
  - Displaying Port Trunk324
  - Link Aggregation Control Protocol (LACP)325
- Rule and Qos329
  - How to Operate Qos330
- Fig. 9.5 Procedure of Qos Operation330
  - Packet Classification331
- Fig. 9.6 Structure of Rule331
  - Flow Creation332
  - Configuring Flow332
  - Applying and Modifying Flow335
  - Class Creation336
  - Packet Conditioning336
  - Rule Action338
    - Policy Creation338
    - Metering339
- Fig. 9.7 Token Bucket Meter340
- Fig. 9.8 Behavior of Srtcm (1)341
- Fig. 9.9 Behavior of Srtcm (2)342
- Fig. 9.10 Behavior of Srtcm (3)342
- Fig. 9.11 Behavior of Trtcm (1)343
- Fig. 9.12 Behavior of Trtcm (2)344
- Fig. 9.13 Behavior of Trtcm (3)344
  - Policy Priority345
  - Policy Action346
  - Setting Cos and Tos Values347
  - Applying and Modifying Policy347
  - Attaching a Policy to an Interface348
  - Displaying Rule348
- Fig. 9.14 Strict Priority Queuing356
- Fig. 9.15 Deficit Round Robin357
- Fig. 9.16 Weighted Round Robin357
  - Scheduling Mode358
  - Weight and Quantum358
  - Maximum and Minimum Bandwidth359
  - Egress Admission Control359
  - Displaying Qos360
  - Displaying Queue Status361
  - Random Early Detection (WRED)361
- Fig. 9.17 WRED Packet Drop Probability362
  - Spanning Tree Protocol (STP)363
- Fig. 9.18 Example of Loop363
- Fig. 9.19 Principle of Spanning Tree Protocol363
  - STP Operation364
    - Root Switch364
- Fig. 9.20 Root Switch364
  - Designated Switch365
  - Designated Port and Root Port365
- Fig. 9.21 Designated Switch365
  - Port Priority366
- Fig. 9.22 Port Priority366
- Fig. 9.23 Port States366
  - RSTP Operation368
    - BPDU Policy368
    - Port States368
- Fig. 9.24 Alternate Port and Backup Port368
  - Rapid Network Convergence369
- Fig. 9.25 Example of Receiving Low BPDU369
- Fig. 9.26 Convergence of 802.1D Network370
- Fig. 9.27 Network Convergence of 802.1W (1)370
- Fig. 9.28 Network Convergence of 802.1W (2)371
- Fig. 9.29 Network Convergece of 802.1W (3)371
  - Compatibility with 802.1D372
  - MSTP Operation372
- Fig. 9.30 Compatibility with 802.1D (1)372
- Fig. 9.31 Compatibility with 802.1D (2)372
  - Mstp373
- Fig. 9.32 CST and ist of MSTP (1)373
- Fig. 9.33 CST and ist of MSTP (2)374
  - Enabling STP Function375
  - STP Mode375
  - STP Basic Configuration376
    - Path-Cost Method376
- Tab. 9.2 STP Path-Cost (Short)376
- Tab. 9.3 RSTP Path-Cost (Long)376
  - Edge Ports377
  - Port Priority377
  - Link Type378
  - Displaying Configuration378
  - Configuring MSTP379
- Fig. 9.34 Example of PVSTP383
  - Root Switch384
  - Path-Cost384
  - Port Priority385
  - Displaying Configuration385
  - Root Guard386
- Fig. 9.35 Root Guard386
  - Restarting Protocol Migration387
  - Loop Back Detection387
  - BPDU Configuration388
- Loop Detection393
- Dynamic Host Configuration Protocol (DHCP)395
- Fig. 9.36 DHCP Service Structure395
  - DHCP Server396
  - DHCP Address Allocation with Option 82403
  - DHCP Lease Database405
  - DHCP Relay Agent407
    - DHCP Helper Address407
- Fig. 9.37 Example of DHCP Relay Agent407
  - Smart Relay Agent Forwarding408
  - DHCP Relay Agent Configuration409
  - DHCP Option409
- Fig. 9.38 DHCP Option 82 Operation412
  - Option 82 Sub-Option413
  - Option 82 Reforwarding Policy414
  - Option 82 Trust Policy414
  - Appending Enterprise Number415
  - DHCP Snooping415
- Fig. 9.39 DHCP Server Packet Filtering426
  - Dynamic Host Configuration Protocol (DHCP) for Ipv6428
- Tab. 9.4 Dhcpv6 Message Types429
- Fig. 9.40 Basic Dhcpv6 Message Format430
- Fig. 9.41 General Shared Relay Message Format431
- Fig. 9.42 an Example of Prefix Delegation431
- Tab. 9.5 Dhcpv6 UDP Port432
- Tab. 9.6 Dhcpv6 Address432
  - Dhcpv6 Server433
  - Dhcpv6 Relay Agent442
    - Dhcpv6 Relay Agent Destination442
  - Dhcpv6 Option442
  - Dhcpv6 Filtering444
  - Debugging Dhcpv6444
- Generic Attribute Registration Protocol (GARP)446
  - Basic Configuration of GARP448
    - GVRP/GMRP Timers448
  - GARP VLAN Registration Protocol (GVRP)449
  - GARP Multicast Registration Protocol (GMRP)450
- Virtual Router Redundancy Protocol (VRRP)453
- Fig. 9.43 VRRP Operation453
  - Enabling VRRP454
  - Configuring VRRP454
- Fig. 9.44 VRRP Track457
  - Authentication Password458
  - Preempt458
  - VRRP Monitoring and Management459
- Rate Limit460
- Flood Guard462
  - MAC Flood Guard462
- Fig. 9.45 Rate Limit and Flood Guard462
  - CPU Flood Guard463
  - System Flood Guard463
  - Invalid Traffic Guard465
    - Attack Guard465
- PPS Control467
- Storm Control467
  - Jumbo Frame Capacity468
  - Configuring Pppoe Tag Option Format469
  - Bandwidth472
  - Maximum Transmission Unit (MTU)472
  - Source Address Validation473
  - Blocking Direct Broadcasting Packets473
  - Blocking Packet Flooding474
10 IP Multicast475
- Fig. 10.1 the V8102 with IGMP Snooping475
- Fig. 10.2 the V8102 with PIM-SM476
- Fig. 10.3 the V8102 with IGMP Snooping and PIM-SM476
  - Multicast Group Membership477
  - Multicast Functions487
- Fig. 10.4 IGMP Snooping489
- Multicast Routing517
- Fig. 10.5 Multicast Equal Cost Multipath (ECMP)518
- Fig. 10.6 Rendezvous Point Tree529
  - Rendezvous Point530
- Fig. 10.7 Shortest Path Tree530
11 Ipv6 Multicast543
- Multicast Listener Discovery (MLD)544
- Fig. 11.1 Mldv1 Message Format545
- Fig. 11.2 Mldv2 Query Message Format546
- Fig. 11.3 Multicast Equal Cost Multipath (ECMP)567
- Fig. 11.4 Rendezvous Point Tree572
- Fig. 11.5 Shortest Path Tree573
12 IP Routing Protocol595
- Border Gateway Protocol (BGP)595
- BGP Community List635
- BGP Timers638
- BGP Network638
- External Routes to BGP Network639
- Debugging BGP643
- BGP Monitoring and Management643
- Open Shortest Path First (OSPF)649
- Routing Information Protocol (RIP)701
- Routing Information Protocol Next Generation (Ripng)713
- Fig. 12.1 Virtual Routing Concept728
  - Configuring VRF Routing Table729
Fig. 12.2 Example of GPON Network734
Tab. 12.1 OLT Redundancy Components742
- Pppoe Configuration773
- ONU Cos Remarking776
Tab. 12.2 RADIUS Authentication Message Type779
- Generic Status Portal (GSP)795
Fig. 12.3 ONU Profile798
Tab. 12.3 Protocol Types for MAC Filtering817
Fig. 12.5 Priority of T-CONT Types822
Fig. 12.6 Voip Service Architecture828
Fig. 12.4 Traffic Profile837
Fig. 12.7 Received Frame Layout843
- TDM Pseudowire Profile867
- Pseudowire Maintenance Profile873
- Performance Monitoring (PM) Profile878
- Multicast Profile882
- Rate-Limit Profile889
  - Saving Rate-Limit Profile890
  - Displaying Rate-Limit Profile891
- ONU Service Profile892
- GPON Debug893
14 System Software Upgrade898
- Boot Mode Upgrade900
- Ius Upgrade903
  - Auto Upgrade906
15 Abbreviations907

Dasan V8102 - Page 233

Table of Contents