Configuring IP Source Guard 405
CHAPTER 17
About IP Source Guard 405
Licensing Requirements for IP Source Guard 406
Prerequisites for IP Source Guard 406
Guidelines and Limitations for IP Source Guard 406
Default Settings for IP Source Guard 407
Configuring IP Source Guard 407
Enabling or Disabling IP Source Guard on a Layer 2 Interface 407
Adding or Removing a Static IP Source Entry 408
Configuring IP Source Guard for Trunk Ports 409
Displaying IP Source Guard Bindings 410
Clearing IP Source Guard Statistics 410
Configuration Example for IP Source Guard 410
Additional References 411
Related Documents 411
Configuring Password Encryption 413
CHAPTER 18
About AES Password Encryption and Master Encryption Keys 413
Licensing Requirements for Password Encryption 413
Guidelines and Limitations for Password Encryption 414
Default Settings for Password Encryption 414
Configuring Password Encryption 414
Configuring a Master Key and Enabling the AES Password Encryption Feature 414
Converting Existing Passwords to Type-6 Encrypted Passwords 416
Converting Type-6 Encrypted Passwords Back to Their Original States 416
Deleting Type-6 Encrypted Passwords 416
Verifying the Password Encryption Configuration 417
Configuration Examples for Password Encryption 417
Configuring Keychain Management 419
CHAPTER 19
About Keychain Management 419
Lifetime of a Key 419
Licensing Requirements for Keychain Management 420
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
xix
Contents