HP A6600 Configuration Manual page 460

protocol state-based (session management), 362
ALG
configuration, 356, 358
enabling, 358
FTP configuration, 358
NBT configuration, 360
protocols supported, 356, 358
SIP/H.323 configuration, 359
algorithm
DH (IKE), 286
IPsec authentication, 244
IPsec encryption, 244
negotiation (SSH2.0), 306
public key configuration, 211, 215
types (public key), 211
anti-replay function (IPsec), 260
application
asymmetric key algorithm, 212
layer protocol detection, 347
PKI, 220
applying
ASPF policy to interface, 353
attack protection policy on interface, 396
connection limit policy, 371
IPsec policy group (interface), 259
QoS policy to IPsec tunnel interface, 268
RSA digital signature in IKE negotiation, 237
architecture
802.1X, 72
PKI, 220
ARP attack protection
authorized ARP
configuration, 421
authorized ARP on DHCP server configuration,
420
configuration, 415
on DHCP relay
configuring active acknowledgement, 419
configuring against IP packet attack, 416, 417
configuring authorized ARP, 419
configuring automatic scanning, 431
configuring detection, 423
configuring filtering, 433, 434
configuring fixed ARP, 431
configuring gateway protection, 432
configuring packet rate limit, 418
configuring source MAC address consistency
check, 418
configuring source suppression, 416
configuring specified object detection, 423
detection with 802.1X support configuration, 428
detection with DHCP snooping configuration, 426
displaying ARP detection, 426
displaying defense against IP packet attack, 416
enabling 802.1X security entry detection, 424
enabling black hole routing, 416
enabling DHCP snooping entry detection, 424
enabling OUI MAC address detection, 424
enabling static IP source guard binding entry
detection, 424
maintaining ARP detection, 426
restricted forwarding configuration, 429
ASPF
ALG configuration, 356, 358
application layer protocol detection, 347
applying ASPF policy to interface, 353
configuration, 352, 354
configuring policy, 353
displaying, 354
agent
external interface, 347
firewall configuration, 345
FTP ALG configuration, 358
functions, 346
448