HP V1910 Switch Series User Manual page 12

ARP function ························································································································································· 298
ARP message format ··········································································································································· 298
ARP operation ······················································································································································ 299
ARP table ······························································································································································ 299
Managing ARP entries ················································································································································· 300
Displaying ARP entries ········································································································································ 300
Creating a static ARP entry ································································································································ 301
Static ARP configuration example ····················································································································· 301
Gratuitous ARP ····························································································································································· 305
Introduction to gratuitous ARP ···························································································································· 305
Configuring gratuitous ARP ································································································································ 305
ARP attack defense configuration ·························································································································· 307
ARP detection ······························································································································································· 307
Introduction to ARP detection ····························································································································· 307
Configuring ARP detection ································································································································· 309
Creating a static binding entry ·························································································································· 311
802.1X fundamentals ············································································································································· 312
Architecture of 802.1X ················································································································································ 312
Controlled/uncontrolled port and port authorization status ···················································································· 312
802.1X-related protocols ············································································································································ 313
Packet formats ······················································································································································ 313
EAP over RADIUS ················································································································································ 315
Initiating 802.1X authentication ································································································································· 315
802.1X client as the initiator ······························································································································ 315
Access device as the initiator ····························································································································· 315
802.1X authentication procedures····························································································································· 316
A comparison of EAP relay and EAP termination ···························································································· 316
EAP relay ······························································································································································ 317
EAP termination ··················································································································································· 319
802.1X configuration ············································································································································· 320
HP implementation of 802.1X ···································································································································· 320
Access control methods ······································································································································ 320
Using 802.1X authentication with other features ···························································································· 320
Configuring 802.1X ···················································································································································· 321
Configuration prerequisites ································································································································ 321
802.1X configuration task list ···························································································································· 322
Configuring 802.1X globally ····························································································································· 322
Configuring 802.1X on a port ··························································································································· 324
Configuration examples ·············································································································································· 326
802.1X configuration example ·························································································································· 326
ACL assignment configuration example············································································································ 333
AAA configuration ·················································································································································· 342
Overview ······································································································································································· 342
Introduction to AAA ············································································································································ 342
Domain-based user management ······················································································································ 343
Configuring AAA ························································································································································· 343
Configuration prerequisites ································································································································ 343
Configuration task list ········································································································································· 343
Configuring an ISP domain ································································································································ 344
Configuring authentication methods for the ISP domain ················································································· 345
Configuring authorization methods for the ISP domain ·················································································· 346
Configuring accounting methods for the ISP domain ······················································································ 347
vii