113
(QCT) (Interface 0/8)#link state group 1 upstream
(QCT) (Interface 0/8)#exit
(QCT) (Config)#interface range 0/3, 0/5
(QCT) (Interface 0/3,0/5)#link state group 1 downstream
(QCT) (Interface 0/3,0/5)#exit
To view link dependency settings for all groups or for the specified group, along with the group state, use the
commands show link state group [group_id] and show link state group group-id detail.
3.14. AR Guard
The following example configures IPv6 RA Guard on a host connected port. The policy drops all incoming RA
and router redirect messages received on the port.
(QCT)#config
(QCT) (config)#interface 0/1
(QCT) (Interface 0/1)#ipv6 nd raguard attach-policy
(QCT) (Interface 0/1)#show ipv6 nd raguard policy
Ipv6 RA-Guard Configured Interfaces
Interface Role
--------------- -------
0/1 Host
3.15. FIP Snooping
FIP snooping is a frame inspection method used by the QNOS FIP Snooping Bridge to monitor FIP frames
and apply policies based on the L2 header information in those frames, following recommendations in
Annex C of FC_BB_5 Rev 2.00.
FIP Snooping enables the following features:
• Auto-configuration of Ethernet ACLs based on information in the Ethernet headers of FIP frames.
• Emulation of fibre channel (FC) point-to-point links within the DCB Ethernet network.
• Enhanced FCoE security/robustness by preventing FCoE MAC spoofing.
To Next Page
Loading...