R3303-HP HSR6800 Routers Layer 2 - LAN Switching Configuration Guide

184
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable DHCP snooping.
dhcp-snooping
By default, DHCP snooping is
disabled.
Enabling ARP detection in SVLANs
The ARP detection function enables a switch to modify the VLAN attributes of ARP packets, which is
impossible under the normal ARP packet processing procedure. For more information about ARP
detection, see Security Configuration Guide.
To enable ARP detection in all SVLANs:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VLAN view.
vlan vlan-id N/A
3. Enable ARP detection.
arp detection enable
By default, ARP detection is
disabled.
To defend against ARP attacks, enable ARP detection also in all CVLANs.
Configuring an uplink policy
To configure an uplink policy to map a group of CVLANs to one SVLAN:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure one class for a
group of CVLANs.
a. Create a class and enter
class view:
traffic classifier tcl-name
operator or
b. Configure multiple
CVLANs as match criteria:
if-match customer-vlan-id
{ vlan-list | vlan-id1 to
vlan-id2 }
c. Return to system view:
quit
Repeat this step to configure one
class for each group of CVLANs.