Filter
Top Products
DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-17
3. Access users (users accessing Switch B) are not allowed to carry out layer-2
packet communication, so as avoid the mutual interference between access users
(such as ARP spoofing or DOS attack).
5.5.3 Configuration Tips
Configuration tips:
1. Enable storm control on the ports of all access devices (Switch A and Switch B).
2. Configure port security feature on the ports (Gi 0/5 and Gi 0/9) of access device
(Switch A) to meet the second requirement.
3. Configure port protection on the access device (Switch B) to meet the third
requirement.
Note:
After enabling port security and configuring IP/MAC entries, ARP Check will be
enabled automatically to check the source address of ARP packets according to the
configured IP/MAC address.
5.5.4 Configuration Steps
Configure Switch A
Step 1: Create the VLAN to which the switch belongs and configure port attributes.
! Create VLAN 2
DES-7200#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)#vlan 2
DES-7200(config-vlan)#exit
! Configure port attributes
DES-7200(config)#interface gigabitEthernet 0/5
DES-7200(config-if-GigabitEthernet 0/5)#switchport access vlan 2
DES-7200(config-if-GigabitEthernet 0/5)#exit
DES-7200(config)#interface gigabitEthernet 0/9
DES-7200(config-if-GigabitEthernet 0/9)#switchport access vlan 2
DES-7200(config-if-GigabitEthernet 0/9)#exit
DES-7200(config)#interface gigabitEthernet 0/1
DES-7200(config-if-GigabitEthernet 0/1)#switchport mode trunk
DES-7200(config-if-GigabitEthernet 0/1)#exit
DES-7200(config)#interface gigabitEthernet 0/13
DES-7200(config-if-GigabitEthernet 0/13)#switchport mode trunk
DES-7200(config-if-GigabitEthernet 0/13)#exit