Whether DHCPv6 snooping allows S series switch to send packets received from user-side interfaces to only network-side interfaces

8

On S series switches (except S1700 switches) in V100R006 and later versions, DHCPv6 snooping allows the switches to send packets received from user-side interfaces to only network-side interfaces.

Other related questions:
Prevent OSPF interfaces on S series switches from sending and receiving protocol packets
To prevent local OSPF routing information from being obtained by devices on other networks and prevent the local S series switch from receiving routing update information advertised by other devices on the same network, run the silent-interface command in the OSPF process view to forbid an OSPF interface on the local switch from sending and receiving OSPF packets. By default, an interface is allowed to receive OSPF packets. Disabling interfaces from receiving and sending OSPF packets is a method of preventing routing loops. After an OSPF interface is prevented from sending and receiving OSPF packets, the interface can still advertise its direct routes. Hello packets on the interface, however, cannot be forwarded. Therefore, no neighbor relationship can be established on the interface. This enhances the networking adaptability of OSPF and reduces system resource consumption. For example, disable VLANIF 200 from sending and receiving OSPF packets as follows: [HUAWEI] ospf 100 [HUAWEI-ospf-100] silent-interface vlanif 200

How to configure a user-side interface on the STP-enabled switch
To prevent a user-side interface from frequently changing between Up and Down states, run the stp disable command on the interface to disable STP or run the stp edged-port enable command to configure it as an edge port so that it does not participate in STP calculation.

Can the authentication mode of an AR router administrator user be set only to No authentication on the AAA side
To improve device security, administrator users are required to be authenticated on the AAA side as well.

Prohibiting specified interfaces from receiving NTP packets
Prohibit a specified interface from receiving NTP packets as follows: 1. Run the system-view command to access the system view. 2. Run the interface interface-type interface-number command to enter the interface view. 3. Run the following commands: The ntp-service in-interface disable command prohibits the firewall interface from receiving NTP IPv4 packets. The ntp-service ipv6 in-interface disable command prohibits the firewall interface from receiving NTP IPv6 packets.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top