HP FlexFabric 5700 Series Security Configuration Manual page 11

Configuring ARP packet source MAC consistency check ························································································ 363
Configuring ARP active acknowledgement ··············································································································· 363
Configuring authorized ARP ······································································································································· 364
Configuration procedure ···································································································································· 364
Configuring ARP detection ·········································································································································· 364
Configuring user validity check ························································································································· 364
Configuring ARP packet validity check ············································································································· 365
Configuring ARP restricted forwarding ············································································································· 366
Displaying and maintaining ARP detection ······································································································ 366
User validity check and ARP packet validity check configuration example ·················································· 367
ARP restricted forwarding configuration example ··························································································· 368
Configuring ARP scanning and fixed ARP ················································································································ 370
Configuration restrictions and guidelines ········································································································· 370
Configuration procedure ···································································································································· 371
Configuring ARP gateway protection ························································································································ 371
Configuration guidelines ···································································································································· 371
Configuration procedure ···································································································································· 371
Configuration example ······································································································································· 372
Configuring ARP filtering ············································································································································· 372
Configuration guidelines ···································································································································· 373
Configuration procedure ···································································································································· 373
Configuration example ······································································································································· 373
Configuring MFF ····················································································································································· 375
Overview ······································································································································································· 375
Basic concepts ····················································································································································· 376
MFF operation modes ········································································································································· 376
MFF working mechanism ···································································································································· 377
Protocols and standards ····································································································································· 377
Configuring MFF ·························································································································································· 377
Enabling MFF ······················································································································································· 377
Configuring a network port ································································································································ 377
Enabling periodic gateway probe ···················································································································· 378
Specifying the IP addresses of servers ·············································································································· 378
Displaying and maintaining MFF ······························································································································· 379
MFF configuration examples ······································································································································· 379
Manual-mode MFF configuration example in a tree network ········································································· 379
Manual-mode MFF configuration example in a ring network ········································································ 380
Configuring crypto engines ···································································································································· 383
Overview ······································································································································································· 383
Displaying and maintaining crypto engines ············································································································· 383
Configuring FIPS······················································································································································ 384
Overview ······································································································································································· 384
Configuration restrictions and guidelines ·················································································································· 384
Configuring FIPS mode ················································································································································ 385
Entering FIPS mode ············································································································································· 385
Configuration changes in FIPS mode ················································································································ 386
Exiting FIPS mode ················································································································································ 387
FIPS self-tests ································································································································································· 388
Power-up self-tests ················································································································································ 388
Conditional self-tests ············································································································································ 389
Triggering self-tests ·············································································································································· 389
Displaying and maintaining FIPS ······························································································································· 389
FIPS configuration examples ······································································································································· 390
ix