HP VSR1000 Security Configuration Manual page 9

Configuring ARP attack protection ························································································································· 313
ARP attack protection configuration task list ············································································································· 313
Configuring ARP source suppression ························································································································· 313
Displaying and maintaining ARP source suppression ····················································································· 314
Configuration example ······································································································································· 314
Configuring source MAC-based ARP attack detection ···························································································· 315
Configuration procedure ···································································································································· 315
Displaying and maintaining source MAC-based ARP attack detection ························································· 316
Configuration example ······································································································································· 316
Configuring ARP packet source MAC consistency check ························································································ 317
Configuring ARP active acknowledgement ··············································································································· 317
Configuring authorized ARP ······································································································································· 318
Configuration procedure ···································································································································· 318
Configuration example (on a DHCP server) ····································································································· 318
Configuration example (on a DHCP relay agent) ···························································································· 319
Configuring ARP automatic scanning and fixed ARP ······························································································· 321
Configuration guidelines ···································································································································· 321
Configuration procedure ···································································································································· 321
Configuring uRPF ····················································································································································· 322
Overview ······································································································································································· 322
uRPF check modes ··············································································································································· 322
Features ································································································································································ 322
uRPF operation ····················································································································································· 323
Network application ··········································································································································· 326
Configuring uRPF·························································································································································· 326
Displaying and maintaining uRPF ······························································································································ 327
uRPF configuration example········································································································································ 327
Configuring IPv6 uRPF ············································································································································ 329
Overview ······································································································································································· 329
IPv6 uRPF check modes ······································································································································· 329
Features ································································································································································ 329
IPv6 uRPF operation ············································································································································ 330
Network application ··········································································································································· 332
Configuring IPv6 uRPF ················································································································································· 333
Displaying and maintaining IPv6 uRPF ······················································································································ 333
IPv6 uRPF configuration example ······························································································································· 334
Configuring crypto engines ···································································································································· 335
Overview ······································································································································································· 335
Displaying and maintaining crypto engines ············································································································· 335
Configuring FIPS······················································································································································ 336
Overview ······································································································································································· 336
Configuration restrictions and guidelines ·················································································································· 336
Configuring FIPS mode ················································································································································ 337
Entering FIPS mode ············································································································································· 337
Configuration changes in FIPS mode ················································································································ 338
Exiting FIPS mode ················································································································································ 338
FIPS self-tests ································································································································································· 339
Power-up self-tests ················································································································································ 340
Conditional self-tests ············································································································································ 340
Triggering self-tests ·············································································································································· 340
Displaying and maintaining FIPS ······························································································································· 341
FIPS configuration examples ······································································································································· 341
vii