ARP 防护解决方案总结

ip pim ssm default ! !

arp access-list test

permit ip host 222.204.220.60 mac host 0005.3b61.c6ea !

control-plane ! !

line con 0

logging synchronous line vty 0 4 password cisco login line vty 5 15 password cisco login ! end

接入交换机配置

Harbour(config)# show runn

Harbour(config)# show running-config !HammerOS system config file !Version 2.2(1.63.0) !Basic information config !

!Login config !

!Usermanage config !

!Port-monitor config !

!Ethernet port config !

!Storm-ctrl config !

!Automatic VCT config !

!Police length type !

!Qos User-priority Map to Queue-id !

!Profile config !

!Class-map config !

!Policy-map config !

!Time-range config !

!Access-list config !

!Drop-profile config

!

!Acess-list control config !

!Port qos config !

!Qos egress-control config !

!Port egress config !

!Share-group config !

!Trunk config !

!VLAN config

interface vlan default 1 add port 1/1-28 untagged

ip address 222.204.220.60 255.255.255.192 exit !

!Private Vlan config config pvlan enable config pvlan test set uplinkport 1/1 add isolatedport 1/2 add isolatedport 1/3 add isolatedport 1/4 add isolatedport 1/5 add isolatedport 1/6 add isolatedport 1/7 add isolatedport 1/8 add isolatedport 1/9 add isolatedport 1/10 add isolatedport 1/11 add isolatedport 1/12 add isolatedport 1/13 add isolatedport 1/14 add isolatedport 1/15 add isolatedport 1/16

add isolatedport 1/17 add isolatedport 1/18 add isolatedport 1/19 add isolatedport 1/20 add isolatedport 1/21 add isolatedport 1/22 add isolatedport 1/23 add isolatedport 1/24 configuration enable exit !

!Loopback config !

!Stp config !

!L2 multicast config !

!GVRP config !

!FDB config !

!H.Link config !

!RADIUS client config

radius authentication add-server id 0 server-ip 218.193.144.6 client-ip 222.204.220.60

radius authentication config-server id 0 shared-secret ZG9uZ3JhZGl1c2h1YQ== radius accounting add-server id 0 server-ip 218.193.144.6 client-ip 222.204.220.60

radius accounting config-server id 0 shared-secret ZG9uZ3JhZGl1c2h1YQ== radius authentication enable radius accounting enable !

!TACC config !

!NAS config

config isp-domain default authentication add-server id 0 config isp-domain default accounting add-server id 0

config isp-domain default authentication config-server id 0 type primary config isp-domain default accounting config-server id 0 type primary !

!Ip pool !

!Dot1x config

config port 1/2 dot1x enable config port 1/3 dot1x enable config port 1/4 dot1x enable config port 1/5 dot1x enable config port 1/6 dot1x enable config port 1/7 dot1x enable