Security
This chapter describes concepts and configurations of security
management.
- Port Isolation
You can configure and query the port isolation mode, bidirectional isolation, and unidirectional isolation.
- AAA
Authentication, Authorization, and Accounting (AAA) is used to manage network security. It provides a uniform framework to configure authentication, authorization, and accounting security functions.
- 802.1x
You can configure 802.1x parameters globally or on an interface.
- MAC Authen
You can configure MAC address authentication globally or on an interface.
- Storm Control
Traffic suppression and storm control are security technologies to control broadcast packets, unknown multicast packets, and unknown unicast packets and to prevent broadcast storms caused by these packets.
- DAI
Dynamic ARP inspection (DAI) prevents Man in The Middle (MITM) attacks and theft on authorized user information.
- IPSG
IP Source Guard (IPSG) can prevent IP address spoofing attacks.
- DHCP Snooping
The Dynamic Host Configuration Protocol (DHCP) snooping function ensures that DHCP clients can obtain IP addresses from authorized DHCP servers.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.