Zte ZXR10 5900 Series - Configuring DAI; DAI Maintenance and Diagnosis

ZXR105900/5200SeriesUserManual(BasicCongurationVolume)
DAIdetectsARPpacketaccordingtothebindingrelationshipbe-
tweenIPandMACaddresswhichisstoredintrustdatabase.When
DHCPSNOOPINGofVLANisopen,databaseiscreatedbyDHCP
SNOOPING.IfARPpacketisreceivedfromatrustport,switchneed
notanydetectionandforwardspacketdirectly.IfARPpacketis
receivedfromauntrustport,switchonlyforwardsvalidpacket.
ConfiguringDAI
Step
CommandFunction
1
Zxr10(config-gei_1/x)#iparpinspectiontrust
Thiscongurestrustattribute
ofinterface.
2
Zxr10(config-smartgroupX)#iparpinspectiontrust
Thiscongurestrustattribute
ofSmartgroupinterface.
3
Zxr10(config)#iparpinspectionvalidate
{[des-mac][ip][src-mac]}
ThisconguresglobalARP
validateinspectionfunction.
4
Zxr10(config-gei_1/x)#iparpinspectionlimit
<1-100>
Thisconguresthelimited
speedofinterface.
Asforuntrustedinterface,the
defaultis15pps.
Asfortrustedinterface,ARP
packetspeedisnotlimited.
5
Zxr10(config-vlanX)#iparpinspection
ThisconguresDAIenabled
ofVLAN.
DAIMaintenanceandDiagnosis
ZXR105900/5200providesshowcommandtohelpmaintenance
anddiagnosis.CommoncommandsusedinDAImaintenanceand
diagnosisareasfollows.
1.Toviewtrustedattributeofinterface,usethefollowingcom-
mand.
showiparpinspection{interfaceinterface_name}
2.ToviewARPpacketvalidatedinspectioninformation,usethe
followingcommand.
showiparpinspectionconfigure
3.ToviewDAIcongurationinformationofVLAN,usethefollow-
ingcommand.
showiparpinspectionvlan[{<1-4094>|disable|enable
|namevlan_name}]
178CondentialandProprietaryInformationofZTECORPORATION