x
User validity check configuration example ······································································································· 380
User validity check and ARP packet validity check configuration example ·················································· 381
ARP restricted forwarding configuration example ··························································································· 383
Configuring ARP automatic scanning and fixed ARP ······························································································· 384
Configuration guidelines ···································································································································· 385
Configuration procedure ···································································································································· 385
Configuring ARP gateway protection ························································································································ 385
Configuration guidelines ···································································································································· 385
Configuration procedure ···································································································································· 386
Configuration example ······································································································································· 386
Configuring ARP filtering ············································································································································· 387
Configuration guidelines ···································································································································· 387
Configuration procedure ···································································································································· 387
Configuration example ······································································································································· 387
Configuring ND attack defense ····························································································································· 389
Overview ······································································································································································· 389
Enabling source MAC consistency check for ND packets ······················································································· 390
Configuring the ND detection function ······················································································································ 390
Introduction to ND detection ······························································································································ 390
Configuration guidelines ···································································································································· 391
Configuration procedure ···································································································································· 391
Displaying and maintaining ND detection ······································································································· 391
ND detection configuration example ························································································································· 392
Network requirements ········································································································································· 392
Configuration procedure ···································································································································· 392
Configuring URPF ···················································································································································· 394
Overview ······································································································································································· 394
URPF check modes ·············································································································································· 394
How URPF works ················································································································································· 394
Network application ··········································································································································· 397
Configuring URPF ························································································································································· 397
URPF configuration example ······································································································································· 397
Configuring MFF ····················································································································································· 399
Overview ······································································································································································· 399
Basic concepts ····················································································································································· 400
Operation modes ················································································································································ 400
Working mechanism ··········································································································································· 401
Protocols and standards ····································································································································· 401
Configuring MFF ·························································································································································· 401
Configuration prerequisites ································································································································ 401
Enabling MFF ······················································································································································· 402
Configuring a network port ································································································································ 402
Enabling periodic gateway probe ···················································································································· 402
Specifying the IP addresses of servers ·············································································································· 402
Displaying and maintaining MFF ······························································································································· 403
MFF configuration examples ······································································································································· 403
Auto-mode MFF configuration example in a tree network ·············································································· 403
Auto-mode MFF configuration example in a ring network ············································································· 405
Manual-mode MFF configuration example in a tree network ········································································· 407
Manual-mode MFF configuration example in a ring network ········································································ 408
Configuring SAVI ···················································································································································· 410
Overview ······································································································································································· 410