2 anti-ip-spoofing, Anti-ip-spoofing -21 – Riverstone Networks WICT1-12 User Manual

Page 133

Advertising
background image

Riverstone Networks RS Switch Router User Guide Release 8.0 7-21

CMTS Configuration Guide

Anti-Spoofing

7.8.2

Anti-IP-spoofing

Anti IP-spoofing prevents CPE's on the same network segment from cloning other CPE addresses. In this example,
anti-spoofing prevents CPE #1 from cloning CPE #2’s IP address.

Here is the configuration for the RS:

! Configure the RS

cmts set headend cm.5.1 hashed-auth-str hbCgHB

cmts set uschannel cm.5.1 upstream 1 state on

! Configure the VLANs

vlan create dhcp port-based

vlan create cmts port-based

vlan add ports et.1.1 to dhcp

vlan add ports cm.5.1 to cmts

! Create the interfaces

interface create ip dhcp address-netmask 50.1.1.1/16 vlan dhcp

interface create ip cmts1 address-netmask 50.2.1.1/16 vlan cmts

et.1.1

cm.5.1

50.1.1.1

DHCP SERVER 1

RS

DDEEFF: 000001 / 50.2.1.X
MODEM #1

CPE #1

DDEEFF: 000002 / 50.2.1.X
MODEM #2

00AOCC: D5B3A / 50.2.1.92
CPE #2

00BOCC: D6B4A / 50.2.1.91

Advertising