Dell PowerConnect B-RX Configuration Manual page 29

BigIron RX Series Configuration Guide
53-1001810-01
Configuring 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . . .960
Displaying 802.1x information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .972
Sample 802.1x configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . .979
Chapter 34 Protecting Against Denial of Service Attacks
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983
Protecting against Smurf attacks. . . . . . . . . . . . . . . . . . . . . . . . . . .983
Protecting against TCP SYN attacks. . . . . . . . . . . . . . . . . . . . . . . . .985
Displaying statistics due DoS attacks . . . . . . . . . . . . . . . . . . . . . . .988
Clear DoS attack statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .988
Chapter 35 Inspecting and Tracking DHCP Packets
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .989
Configuring an authentication method list for 802.1x . . . . . .961
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .961
Configuring dynamic VLAN assignment for 802.1x ports . . . .962
Disabling and enabling strict security mode for dynamic filter
assignment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .963
Dynamically applying existing ACLs or MAC address filter . . .964
Configuring per-user IP ACLs or MAC address filters . . . . . . . .966
Enabling 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . .966
Setting the port control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .967
Configuring periodic re-authentication . . . . . . . . . . . . . . . . . . .968
Re-authenticating a port manually . . . . . . . . . . . . . . . . . . . . . .968
Setting the quiet period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Setting the interval for retransmission of EAP-request/identity
frames. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Specifying the number of EAP-request/identity frame
retransmissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Specifying a timeout for retransmission of messages to the
authentication server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Specifying a timeout for retransmission of EAP-request frames to the
client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Initializing 802.1x on a port . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Allowing multiple 802.1x clients to authenticate. . . . . . . . . . .970
Displaying 802.1x configuration information. . . . . . . . . . . . . .972
Displaying 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . 974
Clearing 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .975
Displaying dynamically assigned VLAN information . . . . . . . .975
Displaying information on MAC address filters and IP ACLs on an
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976
Displaying information about the dot1x-mac-sessions on each port
978
Point-to-point configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . .980
Hub configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .981
Avoiding being an intermediary in a Smurf attack. . . . . . . . . .984
ACL-based DOS-attack prevention . . . . . . . . . . . . . . . . . . . . . .984
TCP security enhancement . . . . . . . . . . . . . . . . . . . . . . . . . . . .986
xxix