Zte ZXA10 C300 - Configuring the Split Horizon; Table 14-6 Configuration Data of ARP Anti-Spoofing

Chapter14AccessSecurityConguration
CongurationData
Table14-6liststhecongurationdataoftheARPanti-spoong.
Table14-6CongurationDataofARPAnti-Spoong
ItemData
ARPanti-spoongstatusEnable
VLANID200
DirectionUserport
Steps
1.EnabletheglobalARPanti-spoongfunction.
ZXAN(config)#ip-servicearp-anti-spoofingenable
2.ConguretheARPanti-spoongfunctionontheVLAN.
ZXAN(config)#ip-servicearp-anti-spoofingvlan200directionuser-port
3.(Optional)QuerythecongurationofARPanti-spoong.
ZXAN(config)#showip-servicearp-anti-spoofing
ArpAnti-Spoofingstatus:Enabled
vlandirection
200user-port
–EndofSteps–
14.4ConguringtheSplitHorizon
Whenusercommunicationcontrolisenabled,onlysubscribersinthespecicVLANand
SVLANcancommunicatewitheachother.
Context
TheZXA10C300supportsthefollowingsplithorizonfeatures:
lSubscriberseparation/intercommunication
lSubscriberintercommunicationbasedonSVLANandCVLAN
Steps
1.Enabletheusercommunicationcontrolfunction.
ZXAN(config)#securityuser-communicationcontrolenable
2.ConguretheintercommunicationVLANs.
ZXAN(config)#securityuser-communicationsvlan300cvlan200
3.(Optional)QuerythecongurationofintercommunicationVLANs.
ZXAN(config)#showsecurityuser-communication
usercommunicationitem:
14-11
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential