Ruijie RG-S2900G-E Series - Page 726

Configuration Guide NFPP Configuration
Caution
With the dhcp-guard disabled, the monitored hosts are
auto-cleared.
Configuring the isolated time
For the isolated time of the attacker, it can be configured in the global or
interface configuration mode. By default, the isolated time is configured in the
global configuration mode.
Command
Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# nfpp
Enter the nfpp configuration mode.
Ruijie(config-nfpp)# dhcp-guard
isolate-period [seconds | permanent]
Configure the global isolated time,
ranging 0s, 30-86400s(one day). The
default value is 0s, representing no
isolation. Permanent represents
permanent isolation.
Ruijie(config-nfpp)# end
Return to the privileged EXEC mode.
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# interface interface-name
Enter the interface configuration
mode.
Ruijie(config-if)# nfpp arp-guard
isolate-period [seconds | permanent]
Configure the isolated time on the
port, ranging 0s, 180-86400s(one
day). By default, the isolated time is
configured globally. 0s represents no
isolation. Permanent represents
permanent isolation.
Ruijie(config-if)# end
Return to the privileged EXEC mode.
Ruijie# show nfpp dhcp-guard summary
Show the parameter settings.
Ruijie# copy running-config
startup-config
Save the configurations.
To restore the global isolated time to the default value, use the no dhcp-guard
isolate-period command in the nfpp configuration mode. If the isolated time
has been configured on a port, you can use the no dhcp-guard isolate-period
command to remove the port-based isolated time configuration in the interface
configuration mode.