HP A5830 Series

HP A5830 Series

280 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

248

Figure 83 Network diagram for URPF configuration

Configuration procedure

1. Configure Switch A.

# Enable strict URPF check.

<SwitchA> system-view

[SwitchA] ip urpf strict

2. Configure Switch B.

# Enable strict URPF check.

<SwitchB> system-view

[SwitchB] ip urpf strict

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Configuring AAA9
- Radius10
- Hwtacacs15
- Domain-Based User Management17
- RADIUS Server Feature of the Switch18
- Protocols and Standards19
- RADIUS Attributes19
- AAA Configuration Considerations and Task List22
- Configuring AAA Schemes24
- Configuring AAA Methods for ISP Domains44
- Tearing down User Connections50
- Configuring a NAS ID-VLAN Binding50
- Configuring a Switch as a RADIUS Server51
- Displaying and Maintaining AAA52
- AAA Configuration Examples52
- Troubleshooting AAA69
  - Troubleshooting RADIUS69
  - Troubleshooting HWTACACS70
802.1X Fundamentals71
- 802.1X Architecture71
- Controlled/Uncontrolled Port and Port Authorization Status71
- 802.1X-Related Protocols72
  - Packet Formats72
  - EAP over RADIUS73
- Initiating 802.1X Authentication74
  - 802.1X Client as the Initiator74
  - Access Device as the Initiator74
- 802.1X Authentication Procedures74
Configuring 802.1X79
- HP Implementation of 802.1X79
- Displaying and Maintaining 802.1X91
- 802.1X Configuration Examples91
Configuring EAD Fast Deployment99
- EAD Fast Deployment Implementation99
- Configuration Prerequisites99
- Configuration Procedure99
- Displaying and Maintaining EAD Fast Deployment100
- EAD Fast Deployment Configuration Example101
- Troubleshooting EAD Fast Deployment103
  - Web Browser Users Cannot be Correctly Redirected103
Configuring MAC Authentication104
- User Account Policies104
- Authentication Approaches104
- MAC Authentication Timers105
- Using MAC Authentication with Other Features105
- MAC Authentication Configuration Task List106
- Basic Configuration for MAC Authentication106
  - Configuration Prerequisites106
  - Configuration Procedure106
- Specifying an Authentication Domain for MAC Authentication Users107
- Configuring a MAC Authentication Guest VLAN108
  - Configuration Prerequisites108
  - Configuration Procedure108
- Displaying and Maintaining MAC Authentication109
- MAC Authentication Configuration Examples109
Configuring Port Security115
- Port Security Features115
- Port Security Modes115
- Support for Guest VLAN and Auth-Fail VLAN118
- Port Security Configuration Task List118
- Enabling Port Security119
  - Configuration Prerequisites119
  - Configuration Procedure119
- Setting Port Security's Limit on the Number of MAC Addresses on a Port119
- Setting the Port Security Mode120
  - Configuration Prerequisites120
  - Configuration Procedure120
- Configuring Port Security Features121
- Configuring Secure MAC Addresses122
  - Configuration Prerequisites123
  - Configuration Procedure123
- Ignoring Authorization Information from the Server123
- Displaying and Maintaining Port Security124
- Port Security Configuration Examples124
- Troubleshooting Port Security134
Configuring Password Control136
- Password Control Configuration Task List138
- Displaying and Maintaining Password Control142
- Password Control Configuration Example143
Configuring Public Keys146
- Public Key Configuration Task List146
- Configuring a Local Asymmetric Key Pair on the Local Device147
- Specifying the Peer Public Key on the Local Device149
- Displaying and Maintaining Public Keys150
- Public Key Configuration Examples150
  - Manually Specifying the Peer Public Key on the Local Device150
  - Importing a Public Key from a Public Key File152
Configuring PKI155
- PKI Terms155
- PKI Architecture156
- PKI Applications157
- PKI Operation157
- PKI Configuration Task List157
- Configuring an Entity DN158
- Configuring a PKI Domain159
- Submitting a PKI Certificate Request161
  - Submitting a Certificate Request in Auto Mode161
  - Submitting a Certificate Request in Manual Mode161
- Retrieving a Certificate Manually162
- Configuring PKI Certificate Verification163
  - Configuring CRL-Checking-Enabled PKI Certificate Verification163
  - Configuring CRL-Checking-Disabled PKI Certificate Verification164
- Destroying a Local RSA Key Pair164
- Deleting a Certificate164
- Configuring an Access Control Policy165
- Displaying and Maintaining PKI165
- PKI Configuration Examples166
- Troubleshooting PKI174
Configuring SSH2.0176
- SSH Operation176
- Configuring the Switch as an SSH Server178
- Configuring the Switch as an SSH Client183
- Displaying and Maintaining SSH185
- SSH Server Configuration Examples185
  - When the Switch Acts as a Server for Password Authentication185
  - When the Switch Acts as a Server for Publickey Authentication187
- SSH Client Configuration Examples192
  - When the Switch Acts as Client for Password Authentication192
  - When the Switch Acts as Client for Publickey Authentication195
Configuring SFTP198
- Configuring the Switch as an SFTP Server198
- Configuring the Switch as an SFTP Client199
- SFTP Client Configuration Example201
- SFTP Server Configuration Example205
Configuring SSL208
- SSL Security Mechanism208
- SSL Protocol Stack208
- SSL Configuration Task List209
- Configuring an SSL Server Policy209
- Configuring an SSL Client Policy212
  - Configuration Prerequisites212
  - Configuration Procedure212
- Displaying and Maintaining SSL213
- Troubleshooting SSL213
  - SSL Handshake Failure213
Configuring TCP Attack Protection215
- Enabling the SYN Cookie Feature215
- Displaying and Maintaining TCP Attack Protection215
Configuring IP Source Guard216
- Static IP Source Guard Binding Entries216
- Dynamic IP Source Guard Binding Entries217
- IP Source Guard Configuration Task List217
- Configuring the Ipv4 Source Guard Function217
- Configuring the Ipv6 Source Guard Function219
- Displaying and Maintaining IP Source Guard221
- IP Source Guard Configuration Examples222
- Troubleshooting IP Source Guard230
  - Cannot Configure Static Binding Entries or Dynamic Binding Function230
Configuring ARP Attack Protection231
- ARP Attack Protection Configuration Task List231
- Configuring ARP Defense against IP Packet Attacks232
- Configuring ARP Packet Rate Limit234
- Configuring Source MAC Address-Based ARP Attack Detection235
- Configuring ARP Packet Source MAC Address Consistency Check237
  - Configuration Procedure237
- Configuring ARP Active Acknowledgement237
- Configuring ARP Detection237
- Configuring ARP Automatic Scanning and Fixed ARP245
  - Configuration Procedure245
Configuring ND Attack Defense247
- Enabling Source MAC Consistency Check for ND Packets248
- Configuring the ND Detection Function248
  - Configuring ND Detection249
  - Displaying and Maintaining ND Detection249
- ND Detection Configuration Example249
- Network Diagram250
Configuring URPF252
- URPF Check Modes252
- How URPF Works252
- Network Application255
- URPF Configuration255
- URPF Configuration Examples255
Support and Other Resources257
- Contacting HP257
  - Subscription Service257
- Related Information257
  - Documents257
  - Websites257
- Conventions258
Index260

Other manuals for HP A5830 Series

Command Reference249 pages

Related product manuals

HP A5800 Series

Preview: HP A5820X Series

HP A5820X Series

Preview: HP A5120 Series

HP A5120 Series

Preview: HP A5120 EI Series

HP A5120 EI Series

Preview: HP A5500 HI Series

HP A5500 HI Series

HP A5120-24G EI TAA

Preview: HP A5500 SI Switch Series

HP A5500 SI Switch Series

Preview: HP AF620A

Preview: HP Aruba JL253A

HP Aruba JL253A

Preview: HP Aruba Instant On 1930

HP Aruba Instant On 1930

Preview: HP Aruba Instant On 1830

HP Aruba Instant On 1830