Huawei S1700 Series - MAC Attack; Illegal Packet Settings

S1700 Managed Series Ethernet Switches
Web User Manual
9 Security
Issue 05 (2012-10-25)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
161
Step 4 Select Untrust Port from drop down menu of Trust Status.
Step 5 Click Apply button to apply the changes made.
----End
CAUTION
DAI untrust port don‟t support Link Aggregation. If port is the member of Link Aggregation,
DAI untrust status cannot be configured, and vice versa.
DAI ARP rate limit don‟t support Link Aggregation. If port is the member of Link
Aggregation, DAI ARP rate limit cannot be enabled, and vice versa.
9.11 MAC Attack
9.11.1 Illegal Packet Settings
Click Security> MAC Attack> Illegal Packet Settings, the configuration page is displayed as
follows.
Figure 9-50 Illegal Packet Settings
Table 9-33 Parameters of Illegal Packet Settings
Item
Description
Illegal Packet Discarded
Enable /Disable Illegal packet Discard. If the switch receives
message's source or destination MAC address with all illegal 0,
it can perform this command and drop the illegal message.
Warning Illegal Packets
Dropped
Click this button to apply Illegal Packets Warning Discard. If
the switch receives the first message's source or destination
MAC address with all illegal 0, it will drop this message and
report an alarm to network manager. If receiving illegal
message subsequently, the switch will only drop this massage
and will not report the alarm. By implementation of this
command, you can remove the last alarm (including the
dropped massage with illegal MAC address 0) to re-trigger a
new alarm.