Triple Play Security Command Reference

Command Hierarchies

•	Anti-Spoofing Commands

•	Layer 2 Security Commands

•	ARP Handling Commands

 

Note: This command tree is limited to those commands specific to Triple Play security. For the full command trees of a particular service type, consult the 7750 SR OS Services Guide.

 

 

Anti-Spoofing Commands

config

—

service

— DHCP VPLS Commands

—	vpls service-id [customer customer-id] [vpn vpn-id] [m-vpls]

—	sap sap-id [split-horizon-group group-name]

—	anti-spoof {ip | mac | ip-mac}

—	no anti-spoof

config

—

service

— DHCP IES Commands

—	ies service-id [customer customer-id] [vpn vpn-id]

— Global Commands

—	[no] interface ip-int-name

— Interface Commands

—	sap sap-id

—	anti-spoof {ip | mac | ip-mac}

—	no anti-spoof

—	subscriber-interface

—	group-interface ip-int-name

—	sap sap-id

—	anti-spoof {ip | ip-mac}

—	no anti-spoof

 

Layer 2 Security Commands

config

—

service

— DHCP VPLS Commands

—	[no] vpls service-id [customer customer-id] [vpn vpn-id] [m-vpls]

—	mac-protect

—	[no] mac [ieee-mac-address]

—	[no] split-horizon-group [group-name] [residential-group]

—	[no] restrict-protected-src

—	[no] restrict-unprotected-dst

—	mesh-sdp sdp-id[:vc-id] [vc-type {ether | vlan}]

—	[no] mac-pinning

—	[no] restrict-protected-src

—	[no] restrict-unprotected-dst

—	spoke-sdp sdp-id[:vc-id] [vc-type {ether | vlan | vpls}] [split-horizon-group group-name]

—	[no] mac-pinning

 

 

 

ARP Handling Commands

config

—

service

—	[no] vpls service-id [customer customer-id] [vpn vpn-id] [m-vpls]

—	sap sap-id

—	arp-reply-agent [sub-ident]

—	no arp-reply-agent

 

 

 

— ARP IES Commands

config

—

service

—	ies service-id [customer customer-id] [vpn vpn-id]

—	[no] interface ip-int-name

—	[no] arp-populate

—	arp-timeout seconds

—	no arp-timeout

—	[no] local-proxy-arp

—	proxy-arp-policy policy-name [policy-name...(up to 5 max)]

—	no proxy-arp-policy

—	[no] remote-proxy-arp

—	static-arp ip-address ieee-address

—	no static-arp ip-address [ieee-address]