R21xx-HP FlexFabric 11900 Security Configuration Guide

203
password events, 60
login
expired password login, 58
user first login, 59
user login attempt limit, 59
user login control, 59
MAC address
ARP attack protection configuration, 123
displaying ARP source MAC address based
attack detection, 127
IP source guard configuration, 113 , 114
IPv4 source guard dynamic configuration with
DHCP relay, 121
IPv4 source guard dynamic configuration with
DHCP snooping, 120
IPv4 source guard static configuration, 118
IPv6 source guard static configuration, 122
maintaining
ARP detection, 133
HWTACACS, 35
IP source guard, 117
IPsec, 169
IPv4 source guard, 117
IPv6 source guard, 117
RADIUS, 29
maintaining password control, 64
managing public keys, 67
max login user setting (AAA), 43
minimum password length, 57
mode
uRPF loose check, 139
uRPF strict check, 139
MPLS L3VPN
AAA implementation, 13
NAS
AAA configuration, 16
AAA HWTACACS implementation, 7
AAA implementation, 11
AAA LDAP implementation, 9
AAA MPLS L3VPN implementation, 13
AAA RADIUS implementation, 2
outgoing RADIUS packet source IP address, 26
RADIUS security policy server IP address
configuration, 29
network
ARP active acknowledgement, 129
ARP automatic scanning, 135
ARP black hole routing, 124
ARP detection configuration, 131
A R P fi l t e r i n g c o n f i g u r a t i o n , 137, 13 8
ARP gateway protection, 136
ARP packet rate limit configuration, 125
ARP packet source MAC consistency check, 129
ARP packet validity check, 132
ARP restricted forwarding, 133
ARP source MAC-based attack detection, 127
ARP source MAC-based attack detection
configuration, 126
ARP source suppression, 124
ARP user validity check, 131
ARP user/packet validity check, 133
authorized ARP (DHCP relay agent), 130
authorized ARP configuration, 129
fixed ARP configuration, 135
IP attack protection (resolvable), 124
IP attack protection (unresolvable), 123
IP source guard dynamic binding entries, 114
IP source guard static binding entries, 113
IPv4 source guard configuration, 115
IPv4 source guard on interface, 115
IPv6 source guard configuration, 116
IPv6 source guard on interface, 116