Dell PowerConnect B-RX Configuration Manual page 29

BigIron RX Series Configuration Guide
53-1001986-01
Configuring 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . . .954
Displaying 802.1x information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .966
Sample 802.1x configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . .973
Chapter 34 Protecting Against Denial of Service Attacks
Protecting against Smurf attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . 977
Protecting against TCP SYN attacks. . . . . . . . . . . . . . . . . . . . . . . . .979
Displaying statistics due DoS attacks . . . . . . . . . . . . . . . . . . . . . . .981
Clear DoS attack statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .982
Configuring an authentication method list for 802.1x . . . . . .955
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .955
Configuring dynamic VLAN assignment for 802.1x ports . . . .956
Disabling and enabling strict security mode for dynamic
filter assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .957
Dynamically applying existing ACLs or MAC address filter . . .958
Configuring per-user IP ACLs or MAC address filters . . . . . . . .960
Enabling 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . .960
Setting the port control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .961
Configuring periodic re-authentication . . . . . . . . . . . . . . . . . . .962
Re-authenticating a port manually . . . . . . . . . . . . . . . . . . . . . .962
Setting the quiet period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .963
Setting the interval for retransmission of EAP-request/
identity frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .963
Specifying the number of EAP-request/identity frame
retransmissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .963
Specifying a timeout for retransmission of messages
to the authentication server . . . . . . . . . . . . . . . . . . . . . . . . . . .964
Specifying a timeout for retransmission of
EAP-request frames to the client . . . . . . . . . . . . . . . . . . . . . . .964
Initializing 802.1x on a port . . . . . . . . . . . . . . . . . . . . . . . . . . .964
Allowing multiple 802.1x clients to authenticate. . . . . . . . . . .964
Displaying 802.1x configuration information. . . . . . . . . . . . . .966
Displaying 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . .968
Clearing 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Displaying dynamically assigned VLAN information . . . . . . . .969
Displaying information on MAC address filters and IP ACLs on an
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Displaying information about the dot1x-mac-sessions on
each port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971
Point-to-point configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . .973
Hub configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 974
Avoiding being an intermediary in a Smurf attack. . . . . . . . . .978
ACL-based DOS-attack prevention . . . . . . . . . . . . . . . . . . . . . .978
TCP security enhancement . . . . . . . . . . . . . . . . . . . . . . . . . . . .980
xxix