HP FlexNetwork 10500 Series Security Configuration Manual page 11

Dynamic IPv4SG using DHCP snooping configuration example ··························································· 424
Dynamic IPv4SG using DHCP relay configuration example ·································································· 425
Static IPv6SG configuration example ····································································································· 426
Dynamic IPv6SG using DHCPv6 snooping configuration example ······················································· 427
Configuring ARP attack protection ······························································ 428
ARP attack protection configuration task list ·································································································· 428
Configuring unresolvable IP attack protection ······························································································· 428
Configuring ARP source suppression ···································································································· 429
Configuring ARP blackhole routing ········································································································ 429
Displaying and maintaining unresolvable IP attack protection ······························································· 429
Configuration example ··························································································································· 430
Configuring ARP packet rate limit ·················································································································· 431
Configuration guidelines ························································································································· 431
Configuration procedure ························································································································· 431
Configuring source MAC-based ARP attack detection ·················································································· 432
Configuration procedure ························································································································· 432
Displaying and maintaining source MAC-based ARP attack detection ·················································· 432
Configuration example ··························································································································· 433
Configuring ARP packet source MAC consistency check ·············································································· 434
Configuring ARP active acknowledgement ···································································································· 434
Configuring authorized ARP ·························································································································· 435
Configuration procedure ························································································································· 435
Configuration example (on a DHCP server) ··························································································· 435
Configuration example (on a DHCP relay agent) ··················································································· 436
Configuring ARP detection ····························································································································· 437
Configuring user validity check ·············································································································· 438
Configuring ARP packet validity check ·································································································· 439
Configuring ARP restricted forwarding ··································································································· 439
Enabling ARP detection logging ············································································································· 440
Displaying and maintaining ARP detection ···························································································· 440
User validity check configuration example ····························································································· 440
User validity check and ARP packet validity check configuration example ············································ 442
Configuring ARP scanning and fixed ARP ····································································································· 443
Configuration restrictions and guidelines ······························································································· 443
Configuration procedure ························································································································· 444
Configuring ARP gateway protection ············································································································· 444
Configuration guidelines ························································································································· 444
Configuration procedure ························································································································· 444
Configuration example ··························································································································· 445
Configuring ARP filtering ································································································································ 445
Configuration guidelines ························································································································· 445
Configuration procedure ························································································································· 446
Configuration example ··························································································································· 446
Configuring the checking of sender IP addresses for ARP packets ······························································ 447
Configuring uRPF ······················································································· 448
Overview ························································································································································ 448
uRPF check modes ································································································································ 448
Features ················································································································································· 448
uRPF operation ······································································································································ 449
Network application ································································································································ 450
Configuration procedure ································································································································ 451
Displaying and maintaining uRPF ·················································································································· 451
uRPF configuration example ·························································································································· 451
Configuring IPv6 uRPF ··············································································· 453
Overview ························································································································································ 453
IPv6 uRPF check modes ························································································································ 453
Features ················································································································································· 453
IPv6 uRPF operation ······························································································································ 454
Network application ································································································································ 455
ix