HP 3600 v2 Series Configuration Manual page 12

Configuring ARP restricted forwarding ············································································································· 382
Configuring the ARP detection logging function ······························································································ 383
Displaying and maintaining ARP detection ······································································································ 383
User validity check configuration example ······································································································· 383
User validity check and ARP packet validity check configuration example ·················································· 385
ARP restricted forwarding configuration example ··························································································· 386
Configuring ARP automatic scanning and fixed ARP ······························································································· 388
Configuration guidelines ···································································································································· 388
Configuration procedure ···································································································································· 388
Configuring ARP gateway protection ························································································································ 389
Configuration guidelines ···································································································································· 389
Configuration procedure ···································································································································· 389
Configuration example ······································································································································· 389
Configuring ARP filtering ············································································································································· 390
Configuration guidelines ···································································································································· 390
Configuration procedure ···································································································································· 390
Configuration example ······································································································································· 391
Configuring ND attack defense ····························································································································· 392
Overview ······································································································································································· 392
Enabling source MAC consistency check for ND packets ······················································································· 393
Configuring the ND detection function ······················································································································ 393
Introduction to ND detection ······························································································································ 393
Configuration guidelines ···································································································································· 394
Configuration procedure ···································································································································· 394
Displaying and maintaining ND detection ······································································································· 394
ND detection configuration example ························································································································· 395
Network requirements ········································································································································· 395
Configuration procedure ···································································································································· 395
Configuring URPF ···················································································································································· 397
Overview ······································································································································································· 397
URPF check modes ·············································································································································· 397
How URPF works ················································································································································· 397
Network application ··········································································································································· 400
Configuring URPF ························································································································································· 400
URPF configuration example ······································································································································· 400
Configuring MFF ····················································································································································· 402
Overview ······································································································································································· 402
Basic concepts ····················································································································································· 403
Operation modes ················································································································································ 403
Working mechanism ··········································································································································· 404
Protocols and standards ····································································································································· 404
Configuring MFF ·························································································································································· 405
Configuration prerequisites ································································································································ 405
Enabling MFF ······················································································································································· 405
Configuring a network port ································································································································ 405
Enabling periodic gateway probe ···················································································································· 405
Specifying the IP addresses of servers ·············································································································· 406
Displaying and maintaining MFF ······························································································································· 406
MFF configuration examples ······································································································································· 407
Auto-mode MFF configuration example in a tree network ·············································································· 407
Auto-mode MFF configuration example in a ring network ············································································· 408
Manual-mode MFF configuration example in a tree network ········································································· 410
Manual-mode MFF configuration example in a ring network ········································································ 411
x