HP MSR2000 Configuration Manual page 9

Troubleshooting connection limits ······························································································································ 271
ACLs in the connection limit rules with overlapping segments ······································································· 271
Configuring ARP attack protection ························································································································· 272
ARP attack protection configuration task list ············································································································· 272
Configuring unresolvable IP attack protection ·········································································································· 273
Configuring ARP source suppression ················································································································ 273
Enabling ARP blackhole routing ························································································································ 273
Displaying and maintaining unresolvable IP attack protection ······································································ 273
Configuration example ······································································································································· 274
Configuring ARP packet rate limit ······························································································································ 275
Configuration guidelines ···································································································································· 275
Configuration procedure ···································································································································· 275
Configuring source MAC-based ARP attack detection ···························································································· 276
Configuration procedure ···································································································································· 276
Displaying and maintaining source MAC-based ARP attack detection ························································· 276
Configuration example ······································································································································· 277
Configuring ARP packet source MAC consistency check ························································································ 278
Configuring ARP active acknowledgement ··············································································································· 278
Configuring authorized ARP ······································································································································· 278
Configuration procedure ···································································································································· 279
Configuration example (on a DHCP server) ····································································································· 279
Configuration example (on a DHCP relay agent) ···························································································· 280
Configuring ARP detection ·········································································································································· 281
Configuring user validity check ························································································································· 282
Configuring ARP packet validity check ············································································································· 282
Configuring ARP restricted forwarding ············································································································· 283
Displaying and maintaining ARP detection ······································································································ 284
User validity check configuration example ······································································································· 284
User validity check and ARP packet validity check configuration example ·················································· 285
Configuring ARP automatic scanning and fixed ARP ······························································································· 287
Configuration guidelines ···································································································································· 287
Configuration procedure ···································································································································· 287
Configuring ARP gateway protection ························································································································ 288
Configuration guidelines ···································································································································· 288
Configuration procedure ···································································································································· 288
Configuration example ······································································································································· 288
Configuring ARP filtering ············································································································································· 289
Configuration guidelines ···································································································································· 289
Configuration procedure ···································································································································· 290
Configuration example ······································································································································· 290
Configuring crypto engines ···································································································································· 291
Overview ······································································································································································· 291
Configuring hardware crypto engines ······················································································································· 291
Displaying and maintaining crypto engines ············································································································· 292
Configuring portal authentication ·························································································································· 293
Overview ······································································································································································· 293
Extended portal functions ··································································································································· 293
Portal system components ··································································································································· 293
Interaction between portal system components ································································································ 295
Portal authentication modes ······························································································································· 295
Portal authentication process ····························································································································· 296
Portal configuration task list ········································································································································ 298
Configuration prerequisites ········································································································································· 298
vii