ZyXEL Communications OLT2406 - Activating IP and MAC Anti-Spoofing; IP and MAC Anti-Spoofing Configuration; VLAN and MAC Spoofing Settings

Chapter 105 IP and MAC Anti-Spoofing
OLT2406 User’s Guide
715
The OLT drops packets from source IP addresses or MAC addresses listed in the exclusive entries and
forwards others.
105.2 IP and MAC Anti-Spoofing Configuration
105.2.1 Activating IP and MAC Anti-Spoofing
These commands activate and de-activate anti-spoofing on the OLT.
These commands activate and de-activate anti-spoofing on the specified port.
Note: You must activate anti-spoofing on both the OLT and the port.
105.2.2 VLAN and MAC Spoofing Settings
These commands configure an anti-spoofing entry on a port-channel interface.
MAC-Only
(Exclusive)
The OLT allows all packets unless the source MAC address is in the list.
IP-MAC
(Exclusive)
The OLT allows non-IP packets. The OLT also allows IP packets unless the source MAC address
and source IP address are in the list.
Table 376 Results for Exclusive Anti-Spoofing Entries (continued)
SETTING RESULT
OLT2406# config
OLT2406(config)# anti-spoofing
OLT2406(config)# no anti-spoofing
OLT2406#config
OLT2406(config)#interface port-channel <AID>
OLT2406(config-interface)# anti-spoofing
OLT2406(config-interface)# no anti-spoofing
OLT2406#config
OLT2406(config)# interface port-channel <AID>
OLT2406(config-interface)# anti-spoofing <inclusive|exclusive> ip <ip> mac <mac-
addr>
OLT2406(config-interface)# anti-spoofing <inclusive|exclusive> ip <ip>
OLT2406(config-interface)# anti-spoofing <inclusive|exclusive> mac <mac-addr>
OLT2406(config-interface)# anti-spoofing inclusive oui-mac <oui-mac-addr>