HP Switch 6120 Manuel d'utilisateur Page 294
- Page / 469
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
8-21
Configuring Advanced Threat Protection
Dynamic ARP Protection
Configuring Additional Validation Checks on ARP
Packets
Dynamic ARP protection can be configured to perform additional validation
checks on ARP packets. By default, no additional checks are performed. To
configure additional validation checks, enter the arp-protect validate command
at the global configuration level.
You can configure one or more of the validation checks. The following
example of the arp-protect validate command shows how to configure the
validation checks for source MAC address and destination AMC address:
ProCurve(config)# arp-protect validate src-mac dst-mac
Verifying the Configuration of Dynamic ARP Protection
To display the current configuration of dynamic ARP protection, including the
additional validation checks and the trusted ports that are configured, enter
the show arp-protect command:
Syntax: [no] arp-protect validate <[src-mac] | [dst-mac] | [ip]>
src-mac (Optional) Drops any ARP request or response
packet in which the source MAC address in the
Ethernet header does not match the sender MAC
address in the body of the ARP packet.
dst-mac (Optional) Drops any unicast ARP response packet
in which the destination MAC address in the
Ethernet header does not mach the target MAC
address in the body of the ARP packet.
ip (Optional) Drops any ARP packet in which the
sender IP address is invalid. Drops any ARP
response packet in which the target IP address is
invalid. Invalid IP addresses include: 0.0.0.0,
255.255.255.255, all IP multicast addresses, and
all Class E IP addresses.
- Access Security Guide 1
- Hewlett-Packard Company 2
- 3 Web and MAC Authentication 6
- 4 TACACS+ Authentication 7
- 10 Configuring Port-Based and 12
- Product Documentation 18
- Software Feature Index 19
- Intelligent Edge Software 20
- Features 20
- Security Overview 23
- Introduction 24
- Access Security Features 25
- Network Security Features 29
- Physical Security 31
- SNMP Security Guidelines 37
- Dynamic Configuration Arbiter 39
- Network Immunity Manager 40
- (IDM) 43
- Menu: Setting Passwords 49
- Security tab 52
- [Device Passwords] 52
- [Apply Changes] 52
- Credentials 54
- Password Command Options 55
- SNMP Security Credentials 56
- Restrictions 64
- Front-Panel Security 66
- Front-Panel Button Functions 67
- Clear Button 68
- Reset Button 68
- ResetClear 69
- Password Recovery 75
- [Y] (for “Yes”) 76
- [N] (for “No”) 76
- Password Recovery Process 77
- MAC Authentication 81
- RADIUS-Based Authentication 83
- Wireless Clients 83
- Web-based Authentication 84
- MAC-based Authentication 86
- Operating Rules and Notes 89
- Setup Procedure for Web/MAC 91
- Web and MAC Authentication 100
- ProCurve Switch (config)# 103
- Files (Optional) 111
- Customizing HTML Templates 112
- Customizable HTML Templates 113
- Overview 127
- Client Status 137
- TACACS+ Authentication 138
- Terminology Used in TACACS 140
- Applications: 140
- General System Requirements 142
- Note on 144
- Privilege Levels 144
- Before You Begin 145
- Configuration 146
- Server Contact Configuration 147
- Authentication Parameters 149
- Caution Regarding 153
- Login Primary 153
- Encryption Keys 156
- First-Choice TACACS+ Server 158
- write mem) 160
- How Authentication Operates 161
- Local Authentication Process 163
- Using the Encryption Key 164
- Access When Using TACACS+ 165
- Authentication 165
- Messages Related to TACACS+ 166
- Operation 166
- Operating Notes 166
- Accounting 168
- Contents 169
- Accounting Services 171
- Configuration MIB 171
- Terminology 172
- You Want RADIUS To Protect 177
- (hpSwitchAuth) is disabled 190
- Commands Authorization 193
- Enabling Authorization 194
- Additional RADIUS Attributes 203
- Configuring RADIUS Accounting 204
- Interim Updating Options 211
- Viewing RADIUS Statistics 213
- RADIUS Accounting Statistics 216
- as both the primary 220
- Prerequisite for Using SSH 225
- Public Key Formats 225
- Enable (Manager) Password 230
- Host Public 232
- Key for the 232
- Configuring Key Lengths 233
- Client Contact Behavior 235
- ■ Execute no ip ssh 237
- Note on Port 239
- Public-Key Authentication 244
- Bit Size Exponent <e> 246
- Modulus <n> 246
- Note on Public 247
- Key Index Number 249
- Logging Messages 251
- Debug Logging 252
- Prerequisite for Using SSL 257
- Password Button 260
- Security Tab 260
- Generate New Key 263
- Enter certificate Arguments 263
- Generate New Certificate 263
- Show host certificate command 264
- [SSL] button 266
- Web browser interface 267
- Browser Contact Behavior 269
- Common Errors in SSL setup 273
- DHCP Snooping 277
- Enabling DHCP Snooping 278
- The DHCP Binding Database 285
- Enabling Debug Logging 286
- Operational Notes 286
- Log Messages 287
- Dynamic ARP Protection 289
- Configuring Trusted Ports 291
- Dynamic IP Lockdown 296
- Prerequisite: DHCP Snooping 297
- Enabling Dynamic IP Lockdown 299
- Database 301
- Adding a Static Binding 302
- Bindings 303
- Debugging Dynamic IP Lockdown 304
- Examples 309
- Filter Types and Operation 313
- Source-Port Filters 314
- Named Source-Port Filters 316
- [ index ] 318
- * ), indicating that the 327
- Editing a Source-Port Filter 328
- Filter Indexing 329
- Configuring Port-Based and 331
- User Authentication Methods 334
- as defined in the 337
- 802.1X standard 337
- VLAN Membership Priority 340
- Access Control 344
- Authenticators 348
- Based Authentication 350
- Wake-on-LAN Traffic 357
- 802.1X Open VLAN Mode 359
- VLAN Membership Priorities 360
- Unauthorized-Client VLANs 366
- Configure Port-Security 375
- Port-Security 376
- Other Switches 377
- Supplicant Port Configuration 379
- Statistics, and Counters 381
- ■ The switch reboots 394
- Affects VLAN Operation 395
- VLAN Assignment on a Port 396
- Based Authentication Session 398
- After the 802.1X session 401
- < port-number >: 403
- Port Security 407
- Eavesdrop Protection 408
- Blocking Unauthorized Traffic 408
- Trunk Group Exclusion 409
- Planning Port Security 410
- Port Security Display Options 411
- Configuring Port Security 415
- listing 418
- use this command syntax: 418
- Retention of Static Addresses 420
- MAC Lockdown 425
- MAC Lockdown Operating Notes 428
- MAC Lockout 429
- # VLANs # Lockout MACs 431
- < = 1024 16 431
- 1025-2048 8 431
- Port Security and MAC Lockout 432
- Security Features 433
- Alert Flags 433
- Send-Disable 435
- Resetting Alert Flags 436
- Yes” for the port on which 437
- Using Authorized IP Managers 443
- Access Levels 445
- Stations 446
- Managers 447
- Building IP Masks 452
- IP Entry 453
- Numerics 457
- 2 – Index 458
- Index – 3 459
- 4 – Index 460
- Index – 5 461
- 6 – Index 462
- Index – 7 463
- 8 – Index 464
- Index – 9 465
- 10 – Index 466
- Index – 11 467
- 12 – Index 468
- *5992-5525* 469
Produits connexes et manuels pour Logiciel HP Switch 6120
Logiciel HP BMD00022 Manuel d'utilisateur
(228 pages)
(228 pages)
Logiciel HP SN6000 Guide de l'utilisateur
(122 pages)
(122 pages)
Logiciel HP 3PAR Manuel d'utilisateur
(89 pages)
(89 pages)
Logiciel HP 700wl Manuel d'utilisateur
(388 pages)
(388 pages)
Logiciel HP X9300 Guide d'installation
(151 pages)
(151 pages)
Logiciel HP SP1 Manuel d'utilisateur
(143 pages)
(143 pages)
Logiciel HP Q.11. (2510-24) Manuel d'utilisateur
(294 pages)
(294 pages)
Logiciel HP 441877-00F Manuel d'utilisateur
(67 pages)
(67 pages)
Logiciel HP 2000s Guide de l'utilisateur
(200 pages)
(200 pages)
Logiciel HP 2012i Manuel d'utilisateur
(86 pages)
(86 pages)
Logiciel HP XP12000 Manuel d'utilisateur
(38 pages)
(38 pages)
Logiciel HP Moonshot-180G Guide de l'utilisateur
(719 pages)
(719 pages)
Logiciel HP 377707-002 Manuel d'utilisateur
(92 pages)
(92 pages)
Logiciel HP 1TB Manuel d'utilisateur
(80 pages)
(80 pages)
Logiciel HP M401dne Manuel d'utilisateur
(160 pages)
(160 pages)
Logiciel HP 441877-00B Manuel d'utilisateur
(176 pages)
(176 pages)
© 2020, manymanuals.fr. Tous droits réservés | 0.097 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels