Zte ZXR10 5250 Series - Access Service Configuration

ZXR105250SeriesCongurationGuide
DHCPsnoopingisenabledonthefollowingport(s):
PortIdPortType
--------------
49Client
50Server
zte(cfg)#setarp-inspectionvlan1enable
zte(cfg)#setarp-inspectionport49untrust
zte(cfg)#setarp-inspectionport49limit15
zte(cfg)#setarp-inspectionvalidateipenable
zte(cfg)#setarp-inspectionvalidatedst-macenable
zte(cfg)#setarp-inspectionvalidatesrc-macenable
Note:
DAIdetectioncondition:theportsendingpacketsisanon-trustedport,andtheDAI
functionisenabledontheVLAN.WhenDHCPSnoopingisenabledandanon-trusted
portisaddedintoDHCPSnooping,DAIdetectionisvalid.
lCongurationVerication
zte(cfg)#showarp-inspection
Enabledvalidation:ip,dst-mac,src-mac
Enabledvlanlist:1
PortIdTrustTypeLimit(pps)
-------------------------
49Untrust15
50Trust-
51Trust-
52Trust-
5.18AccessServiceConguration
AccessServiceOverview
WiththerapidexpansionofEthernet,tomeetthefastincreaseofsubscribersand
requirementofdiversiedbroadbandservices,aNetworkAccessService(NAS)is
embeddedontheswitchtoimprovetheauthenticationandmanagementofaccess
subscribersandbettersupportthebilling,security,operation,andmanagementofthe
broadbandnetwork.
NASusesthe802.1xprotocolandRADIUSprotocoltorealizetheauthenticationand
managementofaccesssubscribers.Itishighlyefcient,safe,andeasytooperate.
IEEE802.1xiscalledport-basednetworkaccesscontrolprotocol.Itsprotocolsystem
includesthreekeyparts:clientsystem,authenticationsystem,andauthenticationserver.
5-70
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential