4
"FD 100/320Gbps NT and FX NT IHub System
Basics, Management and OAM Guide"
3HH-11982-AAAA-TQZZA Issue: 10
3.5.3.5 server.........................................................................................................35
3.5.3.6 user-user-hairpin .......................................................................................36
3.5.3.7 vlan-dot1q-etype........................................................................................36
3.5.3.8 core1-uptime..............................................................................................36
3.5.3.9 ipv6-prefix-mgmt........................................................................................37
3.5.3.10 dst-ip..........................................................................................................37
3.5.3.11 src-ip..........................................................................................................37
3.5.4 Clear Commands.......................................................................................38
3.5.4.1 alarm..........................................................................................................38
4 Security..........................................................................................41
4.1 Security Features ......................................................................................41
4.1.1 Encryption..................................................................................................41
4.1.2 TCP Enhanced Authentication Option.......................................................41
4.1.2.1 Packet Format ...........................................................................................42
4.1.2.2 Keychain....................................................................................................43
4.2 Configuring Security with CLI ....................................................................44
4.2.1 Security Configuration Procedures............................................................44
4.2.1.1 Configuring IP CPU Filters ........................................................................44
4.2.1.2 Configuring IPv6 CPU Filters.....................................................................45
4.2.1.3 Configuring Keychains...............................................................................46
4.3 Security CLI Command Reference............................................................47
4.3.1 Source address type Command ................................................................47
4.3.2 CPU filter Commands................................................................................47
4.3.3 Keychain Commands ................................................................................48
4.3.4 Show Commands ......................................................................................49
4.4 Security CLI Commands............................................................................49
4.4.1 General Security Commands ....................................................................49
4.4.1.1 description .................................................................................................49
4.4.1.2 shutdown ...................................................................................................50
4.4.1.3 address-type..............................................................................................50
4.4.2 CPU-filter Commands................................................................................51
4.4.2.1 cpu-filter.....................................................................................................51
4.4.2.2 default-action .............................................................................................51
4.4.2.3 ip-filter........................................................................................................52
4.4.2.4 entry...........................................................................................................52
4.4.2.5 action .........................................................................................................53
4.4.2.6 match.........................................................................................................54
4.4.2.7 dscp ...........................................................................................................55
4.4.2.8 dst-ip..........................................................................................................56
4.4.2.9 dst-port ......................................................................................................56
4.4.2.10 fragment ....................................................................................................57
4.4.2.11 icmp-code..................................................................................................57
4.4.2.12 icmp-type ...................................................................................................58
4.4.2.13 option-present............................................................................................58
4.4.2.14 service .......................................................................................................59
4.4.2.15 src-ip..........................................................................................................59
4.4.2.16 src-port ......................................................................................................59
4.4.2.17 tcp-ack .......................................................................................................60
4.4.2.18 tcp-syn .......................................................................................................60