Dynamic Ip Lockdown - HP ProCurve 3500yl Release Notes

Enhancements
Release K.13.19 Enhancements
show port-access web-based config
Syntax: show port-access web-based config [<port-list>]
Displays the currently configured Web Authentication settings for all ports or
specified ports, including web-specific settings for password retries, SSL login
status, and a redirect URL, if specified.
ProCurve Switch (config)# show port-access web-based 47 config
Port Access Web-Based Configuration
DHCP Base Address : 192.168.0.0
DHCP Subnet Mask
DHCP Lease Length : 10
Allow RADIUS-assigned dynamic (GVRP) VLANs [No] : No
EWA_Server Address | EWA-Server Page Path
------------------ + --------------------
10.0.12.179
10.0.12.180
Port Enabled
----- -------- ------ ------ --------- --------- -------- -------- -----
47 Yes
ProCurve Switch (config)#
Figure 33. Example of show port-access Web-based config Command Output
Enhancement (PR_1000460265) — This enhancement provides Dynamic IP Lockdown,
which is used to prevent IP source address spoofing on a per-port and per-VLAN basis.

Dynamic IP Lockdown

The Dynamic IP Lockdown feature is used to prevent IP source address spoofing on a per-port and
per-VLAN basis. When dynamic IP lockdown is enabled, IP packets in VLAN traffic received on a port
are forwarded only if they contain a known source IP address and MAC address binding for the port.
The IP-to-MAC address binding can either be statically configured or learned by the DHCP Snooping
feature.
129
: 255.255.255.0
| /EWA
| /EWA
Client Client Logoff
Limit Moves Period
1 No 300
Re-Auth Unauth
Period VLAN ID
0 1
Auth Cntrl
VLAN ID Dir
0 both