HPE FlexNetwork 5510 HI Series Security Configuration Manual page 11

Configuration procedure ··································································································· 414
Configuring source MAC-based ARP attack detection ···································································· 414
Configuration procedure ··································································································· 415
Displaying and maintaining source MAC-based ARP attack detection ········································· 415
Configuration example ······································································································ 415
Configuring ARP packet source MAC consistency check ································································ 416
Configuring ARP active acknowledgement ·················································································· 417
Configuring authorized ARP ····································································································· 417
Configuration procedure ··································································································· 417
Configuration example (on a DHCP server) ··········································································· 418
Configuration example (on a DHCP relay agent) ···································································· 419
Configuring ARP attack detection ······························································································ 420
Configuring user validity check ··························································································· 420
Configuring ARP packet validity check ················································································· 421
Configuring ARP restricted forwarding ················································································· 422
Enabling ARP attack detection logging ················································································· 422
Displaying and maintaining ARP attack detection ··································································· 423
User validity check and ARP packet validity check configuration example ···································· 423
ARP restricted forwarding configuration example ··································································· 424
Configuring ARP scanning and fixed ARP ··················································································· 426
Configuration restrictions and guidelines ·············································································· 426
Configuration procedure ··································································································· 427
Configuring ARP gateway protection ·························································································· 427
Configuration guidelines ··································································································· 427
Configuration procedure ··································································································· 427
Configuration example ······································································································ 428
Configuring ARP filtering ········································································································· 428
Configuration guidelines ··································································································· 428
Configuration procedure ··································································································· 429
Configuration example ······································································································ 429
Configuring MFF ·········································································· 431
Overview ······························································································································ 431
Basic concepts ··············································································································· 432
MFF operation modes ······································································································ 432
MFF working mechanism ·································································································· 433
Protocols and standards ··································································································· 433
Configuring MFF ···················································································································· 433
Enabling MFF ················································································································· 433
Configuring a network port ································································································ 433
Enabling periodic gateway probe ························································································ 434
Specifying the IP addresses of servers················································································· 434
Displaying and maintaining MFF ······························································································· 434
MFF configuration examples ···································································································· 435
Manual-mode MFF configuration example in a tree network ····················································· 435
Manual-mode MFF configuration example in a ring network ····················································· 436
Configuring uRPF ········································································· 438
Overview ······························································································································ 438
uRPF check modes ········································································································· 438
uRPF operation ··············································································································· 438
Network application ········································································································· 441
Enabling uRPF ······················································································································ 441
Displaying and maintaining uRPF ······························································································ 441
uRPF configuration example ···································································································· 442
Configuring crypto engines ····························································· 443
Overview ······························································································································ 443
Displaying and maintaining crypto engines ·················································································· 443
Configuring FIPS ·········································································· 444
Overview ······························································································································ 444
ix