Orion A10E - IP Source Guard; Introduction

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
184
Alpha-A28E(config-port)#dot1x enable
Step 3 Set the authorization mote to protocol authorization mode.
Alpha-A28E(config-port)#dot1x auth-control auto
Step 4 Enable re-authentication and set the re-authentication time to 600s.
Alpha-A28E(config-port)#dot1x reauthentication enable
Alpha-A28E(config-port)#dot1x timer reauth-period 600
Checking results
Show 802.1x configurations by the command of show dot1x port-list port-list.
Alpha-A28E#show dot1x port-list 1
802.1x Global Admin State: Enable
802.1x Authentication Method: Chap
Port 1
--------------------------------------------------------
802.1X Port Admin State: Enable
PAE: Authenticator
PortMethod: Portbased
PortControl: Auto
PortStatus: Authorized
Authenticator PAE State: Initialize
Backend Authenticator State: Initialize
ReAuthentication: Disable
QuietPeriod: 60(s)
ServerTimeout: 100(s)
SuppTimeout: 30(s)
ReAuthPeriod: 3600(s)
TxPeriod: 30(s)
6.8 IP Source Guard
6.8.1 Introduction
IP Source Guard uses a binding table to defend against IP Source spoofing and solve IP
address embezzlement without identity authentication. IP Source Guard can cooperate with
DHCP snooping to generate dynamic binding relationship. In addition, you can configure
static binding relationship manually. DHCP Snooping filters untrusted DHCP packets by
establishing and maintaining the DHCP binding database.