Qtech QSW-8200-52T-AC Команды для функции безопасности онлайн [103/114] 481623

User Manual

Chapter 11. Commands for SAVI 103

www.qtech.ru

 Switch(config)#interface ethernet1/0/1

 Switch(config-if-ethernet1/0/1)# savi ipv6 check source ip-address mac-address

11.1.10 savi ipv6 {dhcp-only | slaac-only | dhcp-slaac} enable

 Command: savi ipv6 {dhcp-only | slaac-only | dhcp-slaac} enable

 no savi ipv6 {dhcp-only | slaac-only | dhcp-slaac} enable

 Function: Enable SAVI application scene function, no command disables the function.

 Parameter: dhcp-only: dhcp-only application scene

 slaac-only: slaac-only application scene

 dhcp-slaac: combination application scene of dhcp-only and slaac-only

 Command Mode: Global Mode.

 Default: Disable SAVI application scene.

 Usage Guide: dhcp-only application scene only detects DHCPv6 packets and DAD NS

packets of link-local ipv6 address to be IPv6 address with target field, it does not detect

DAD NS packets of non-link-local address. slaac-only application scene detects DAD NS

packets of all types. dhcp-slaac combination application scene detects all DHCPv6 and

DAD NS packets. Disable all kinds of application scene detection function for SAVI by

default.

 Example: Enable the specified dhcp-only application scene for SAVI.

 Switch(config)#savi ipv6 dhcp-only enable

11.1.11 savi ipv6 mac-binding-limit

 Command: savi ipv6 mac-binding-limit <limit-num>

 no savi ipv6 mac-binding-limit

 Function: Configure the dynamic binding number of the same MAC address, no

command restores the default value.

 Parameter: limit-num: set the ranging from 1 to 10, the default dynamic binding

number is 32 for the same MAC address.

 Command Mode: Global Mode.

 Default: 32.

 Usage Guide: This command is used to prevent the exhaust attack of the dynamic

binding entry for SAVI.

 Example: Set the dynamic binding number to be 5 for the same MAC address.

 Switch(config)#isavi ipv6 mac-binding-limit 5

11.1.12 savi max-dad-dalay

 Command: savi max-dad-delay <max-dad-delay>

 no savi max-dad-delay

 Function: Configure the dynamic binding at DETECTION state and send lifetime period

of DAD NS packet detection, no command restores the default value.