7 mac-authentication-bypass spoofing-garp-check, Authentication, Bypass spoofing – PLANET XGS3-24042 User Manual

Page 1033: Garp, Check

Advertising
background image

56-4

Function:

Set guest vlan of MAB authentication. The no command deletes guest vlan.

Parameters:

<1-4094>: guest vlan ID, ranging from 1 to 4094.

Command Mode:

Port Mode

Usage Guide:

Set guest vlan of MAB authentication, only Hybrid port use this command, it is not take effect on

access port. After MAB authentication is failing, if the existent guest vlan is configured by the port

connecting to the MAB user, the MAB user can join and access guest vlan.

Example:

Configure guest vlan of MAB authentication for port 1/0/1

Switch(Config)#interface ethernet 1/0/1

Switch(config-If-Ethernet1/0/1)#mac-authentication-bypass guest-vlan 10

56.7 mac-authentication-bypass spoofing-garp-check

Command:

mac-authentication-bypass spoofing-garp-check enable

no mac-authentication-bypass spoofing-garp-check enable

Function:

Enable the spoofing-garp-check function, MAB function will not deal with spoofing-garp any more;

the no command disables the function.

Command Mode:

Global Mode

Default:

Disable spoofing-garp-check function.

Usage Guide:

When the terminal of Windows operating system detects the address conflict, it will sends a

gratuitous ARP to correct the error ARP entries generated by gratuitous ARP of the conflict

detection. This command is used to detect the spoofing-garp when occuring the address conflict,

MAB function is not deal with the packet any more. Notice: when enabling the check function, all

ARP will be processed the software check, it will add switch’s load.

Example:

Enable spoofing-garp-check function.

Switch(Config)#mac-authentication-bypass spoofing-garp-check enable

Advertising