12 – Index
dynamic ARP protection, enabling … 11-16
required for ACLs … 10-3
validation checks on ARP packets,
configuring … 11-21
ip source-binding … 11-29
ip source-lockdown … 11-26, 11-27
bindings … 11-30, 11-31
IP spoofing
protection against … 11-24
IP-to-MAC binding … 11-20, 11-28
IPv4, ACL
vendor-specific attribute … 7-24, 7-25
IPv6
ACL
vendor-specific attribute … 7-24, 7-25
IPv6, ACL
vendor-specific attribute … 7-24
ip-version, ipv4or6 …8-17
K
key chain
See KMS key chain.
key management system
See KMS.
KMS
accept key time … 16-5, 16-6
assigning a time-dependent key … 16-5
assigning a time-independent key … 16-4
generating a key chain … 16-3
generating a time-dependent key … 16-5
generating a time-independent key … 16-4
key chain … 16-2
key chain entry … 16-3
key chain generation … 16-2
overview … 16-1
send key time … 16-5
time protocol … 16-6
time-dependent key … 16-2, 16-5, 16-6
time-independent key … 16-2, 16-4
L
LACP
802.1X not allowed … 13-12, 13-18, 13-78
listening …8-18
local privilege levels …6-75
login attempts, monitoring … 11-34
M
MAC address
count, monitoring … 11-34
inconsistent value … 14-20
moves, monitoring … 11-34
MAC authentication
address limit … 4-52
authenticator operation … 4-5
blocked traffic … 4-1
CHAP
defined … 4-9
usage…4-1
client status … 4-71
concurrent with Web … 4-3
configuration commands … 4-49
configuring
on the switch … 4-48
switch for RADIUS access … 4-15
the RADIUS server … 4-15
general setup … 4-12
hierarchy of precedence in authentication
session … 1-16
http redirect … 4-59
http registration steps … 4-61
LACP not allowed … 4-12
overview … 1-5
port access … 13-2
reauthentication client … 4-63
restrictive filter … 4-63
rules of operation … 4-10
show status and configuration … 4-65
terminology … 4-9
unauth-redirect command … 4-59, 4-60
unconfigure registration server … 4-64
web registration … 4-59
MAC Lockdown … 14-1
MAC lockout … 14-1
number of vlans … 14-33
MAC-Based VLAN …6-51
manager password … 2-2, 2-4, 2-5
recommended … 5-6
saving to configuration file … 2-15
MD5
See RADIUS.
message
inconsistent value … 14-20
messages
custom when not authenticated … 4-54