R0106-HP MSR Router Series Security Configuration Guide(V7)

x
Configuration example (on a DHCP relay agent) ···························································································· 409
Configuring ARP detection ·········································································································································· 410
Configuring user validity check ························································································································· 411
Configuring ARP packet validity check ············································································································· 411
Configuring ARP restricted forwarding ············································································································· 412
Displaying and maintaining ARP detection ······································································································ 412
User validity check and ARP packet validity check configuration example ·················································· 413
ARP restricted forwarding configuration example ··························································································· 414
Configuring ARP scanning and fixed ARP ················································································································ 416
Configuration restrictions and guidelines ········································································································· 416
Configuration procedure ···································································································································· 417
Configuring ARP gateway protection ························································································································ 417
Configuration guidelines ···································································································································· 417
Configuration procedure ···································································································································· 417
Configuration example ······································································································································· 418
Configuring ARP filtering ············································································································································· 418
Configuration guidelines ···································································································································· 419
Configuration procedure ···································································································································· 419
Configuration example ······································································································································· 419
Configuring uRPF ····················································································································································· 421
Overview ······································································································································································· 421
uRPF check modes ··············································································································································· 421
Features ································································································································································ 421
uRPF operation ····················································································································································· 422
Network application ··········································································································································· 425
Configuring uRPF·························································································································································· 425
Displaying and maintaining uRPF ······························································································································ 426
uRPF configuration example········································································································································ 426
Configuring IPv6 uRPF ············································································································································ 428
Overview ······································································································································································· 428
IPv6 uRPF check modes ······································································································································· 428
Features ································································································································································ 428
IPv6 uRPF operation ············································································································································ 429
Network application ··········································································································································· 431
Configuring IPv6 uRPF ················································································································································· 432
Displaying and maintaining IPv6 uRPF ······················································································································ 432
IPv6 uRPF configuration example ······························································································································· 432
Configuring crypto engines ···································································································································· 434
Overview ······································································································································································· 434
Configuring hardware crypto engines ······················································································································· 434
Displaying and maintaining crypto engines ············································································································· 435
Configuring FIPS······················································································································································ 436
Overview ······································································································································································· 436
Configuration restrictions and guidelines ·················································································································· 436
Configuring FIPS mode ················································································································································ 437
Entering FIPS mode ············································································································································· 437
Configuration changes in FIPS mode ················································································································ 438
Exiting FIPS mode ················································································································································ 439
FIPS self-tests ································································································································································· 440
Power-up self-tests ················································································································································ 440
Conditional self-tests ············································································································································ 441
Triggering self-tests ·············································································································································· 441