beautypg.com

H3C Technologies H3C S7500E Series Switches User Manual

Page 12

background image

vi

Specifying a Source IP Address or Interface for the SFTP Client·················································12-2

Establishing a Connection to the SFTP Server·············································································12-3

Working with SFTP Directories ·····································································································12-3

Working with SFTP Files ···············································································································12-4

Displaying Help Information ··········································································································12-5

Terminating the Connection to the Remote SFTP Server·····························································12-5

SFTP Client Configuration Example ·····································································································12-6

SFTP Server Configuration Example····································································································12-9

13 IP Source Guard Configuration············································································································13-1

IP Source Guard Overview ···················································································································13-1

Introduction····································································································································13-1

Configuring a Static IP Source Guard Entry ·························································································13-2

Configuring the Dynamic IP Source Guard Binding Function·······························································13-3

Displaying and Maintaining IP Source Guard ·······················································································13-4

IP Source Guard Configuration Examples ····························································································13-5

Static IP Source Guard Binding Entry Configuration Example ·····················································13-5

Dynamic IP Source Guard Binding Function Configuration Example 1 ········································13-6

Dynamic IP Source Guard Binding Function Configuration Example 2 ········································13-8

Dynamic IP Source Guard Binding Function Configuration Example 3 ········································13-9

Troubleshooting IP Source Guard ······································································································13-10

Can Configure Neither Static Binding Entries nor the Dynamic Binding Function ······················13-10

14 ARP Attack Protection Configuration··································································································14-1

ARP Attack Protection Overview ··········································································································14-1

ARP Attack Protection Configuration Task List ····················································································14-1

Configuring ARP Defense Against IP Packet Attacks ··········································································14-2

Introduction····································································································································14-2

Configuring ARP Source Suppression ··························································································14-2

Enabling ARP Black Hole Routing ································································································14-3

Displaying and Maintaining ARP Defense Against IP Packet Attacks ··········································14-3

Configuring ARP Active Acknowledgement ··························································································14-3

Introduction····································································································································14-3

Configuring the ARP Active Acknowledgement Function ·····························································14-3

Configuring Source MAC Address Based ARP Attack Detection·························································14-3

Introduction····································································································································14-3

Configuration Procedure················································································································14-4

Displaying and Maintaining Source MAC Address Based ARP Attack Detection·························14-4

Configuring ARP Packet Rate Limit ······································································································14-5

Introduction····································································································································14-5

Configuring the ARP Packet Rate Limit Function ·········································································14-5

Configuring ARP Detection ···················································································································14-5

Introduction····································································································································14-5

Configuring ARP Detection Based on Specified Objects ······························································14-6

Enabling ARP Detection Based on Static IP Source Guard Binding Entries/DHCP Snooping

Entries/802.1X Security Entries/OUI MAC Addresses ··································································14-6

Displaying and Maintaining ARP Detection···················································································14-8