Configuring SCP ······················································································································································ 212
Overview ······································································································································································· 212
Configuring SSL ······················································································································································· 216
Overview ······································································································································································· 216
SSL security mechanism ······································································································································ 216
SSL protocol stack ··············································································································································· 216
Configuration task list ·················································································································································· 217
Configuring an SSL server policy ······························································································································· 217
Configuring an SSL client policy ································································································································ 220
Displaying and maintaining SSL ································································································································· 221
Troubleshooting SSL ····················································································································································· 221
Overview ······································································································································································· 223
Enabling the SYN Cookie feature ······························································································································ 223
Configuring IP source guard ·································································································································· 225
Overview ······································································································································································· 225
Static IP source guard entries ····························································································································· 225
Dynamic IP source guard entries ······················································································································· 225
Configuration task list ·················································································································································· 226
Troubleshooting IP source guard ································································································································ 233
Overview ······································································································································································· 234
Enabling ARP black hole routing ······················································································································· 235
Configuration example ······································································································································· 236
Introduction ·························································································································································· 237
Configuration procedure ···································································································································· 237
Configuration procedure ···································································································································· 238
Configuration example ······································································································································· 239
vi