Name: HP A5830 Series
Brand: HP
Rating: 5 (1 reviews)

To Next Page

To Previous Page

245

Figure 81 URPF work flow

1. URPF checks the source address validity and does the following:

• Discards packets with a broadcast source address.

• Discards packets with an all-zero source address but a non-broadcast destination address. (A

packet with source address 0.0.0.0 and destination address 255.255.255.255 might be a DHCP

or BOOTP packet, and it is not discarded.)

Default Chapter1
- Configuration Guide1
- Table of Contents3
Configuring AAA9
- Radius10
- Hwtacacs15
- Domain-Based User Management17
- RADIUS Server Feature of the Switch18
- Protocols and Standards19
- RADIUS Attributes19
- AAA Configuration Considerations and Task List22
- Configuring AAA Schemes24
- Configuring AAA Methods for ISP Domains44
- Tearing down User Connections50
- Configuring a NAS ID-VLAN Binding50
- Configuring a Switch as a RADIUS Server51
- Displaying and Maintaining AAA52
- AAA Configuration Examples52
- Troubleshooting AAA69
  - Troubleshooting RADIUS69
  - Troubleshooting HWTACACS70
802.1X Fundamentals71
- 802.1X Architecture71
- Controlled/Uncontrolled Port and Port Authorization Status71
- 802.1X-Related Protocols72
  - Packet Formats72
  - EAP over RADIUS73
- Initiating 802.1X Authentication74
  - 802.1X Client as the Initiator74
  - Access Device as the Initiator74
- 802.1X Authentication Procedures74
Configuring 802.1X79
- HP Implementation of 802.1X79
- Displaying and Maintaining 802.1X91
- 802.1X Configuration Examples91
Configuring EAD Fast Deployment99
- EAD Fast Deployment Implementation99
- Configuration Prerequisites99
- Configuration Procedure99
- Displaying and Maintaining EAD Fast Deployment100
- EAD Fast Deployment Configuration Example101
- Troubleshooting EAD Fast Deployment103
  - Web Browser Users Cannot be Correctly Redirected103
Configuring MAC Authentication104
- User Account Policies104
- Authentication Approaches104
- MAC Authentication Timers105
- Using MAC Authentication with Other Features105
- MAC Authentication Configuration Task List106
- Basic Configuration for MAC Authentication106
  - Configuration Prerequisites106
  - Configuration Procedure106
- Specifying an Authentication Domain for MAC Authentication Users107
- Configuring a MAC Authentication Guest VLAN108
  - Configuration Prerequisites108
  - Configuration Procedure108
- Displaying and Maintaining MAC Authentication109
- MAC Authentication Configuration Examples109
Configuring Port Security115
- Port Security Features115
- Port Security Modes115
- Support for Guest VLAN and Auth-Fail VLAN118
- Port Security Configuration Task List118
- Enabling Port Security119
  - Configuration Prerequisites119
  - Configuration Procedure119
- Setting Port Security's Limit on the Number of MAC Addresses on a Port119
- Setting the Port Security Mode120
  - Configuration Prerequisites120
  - Configuration Procedure120
- Configuring Port Security Features121
- Configuring Secure MAC Addresses122
  - Configuration Prerequisites123
  - Configuration Procedure123
- Ignoring Authorization Information from the Server123
- Displaying and Maintaining Port Security124
- Port Security Configuration Examples124
- Troubleshooting Port Security134
Configuring Password Control136
- Password Control Configuration Task List138
- Displaying and Maintaining Password Control142
- Password Control Configuration Example143
Configuring Public Keys146
- Public Key Configuration Task List146
- Configuring a Local Asymmetric Key Pair on the Local Device147
- Specifying the Peer Public Key on the Local Device149
- Displaying and Maintaining Public Keys150
- Public Key Configuration Examples150
  - Manually Specifying the Peer Public Key on the Local Device150
  - Importing a Public Key from a Public Key File152
Configuring PKI155
- PKI Terms155
- PKI Architecture156
- PKI Applications157
- PKI Operation157
- PKI Configuration Task List157
- Configuring an Entity DN158
- Configuring a PKI Domain159
- Submitting a PKI Certificate Request161
  - Submitting a Certificate Request in Auto Mode161
  - Submitting a Certificate Request in Manual Mode161
- Retrieving a Certificate Manually162
- Configuring PKI Certificate Verification163
  - Configuring CRL-Checking-Enabled PKI Certificate Verification163
  - Configuring CRL-Checking-Disabled PKI Certificate Verification164
- Destroying a Local RSA Key Pair164
- Deleting a Certificate164
- Configuring an Access Control Policy165
- Displaying and Maintaining PKI165
- PKI Configuration Examples166
- Troubleshooting PKI174
Configuring SSH2.0176
- SSH Operation176
- Configuring the Switch as an SSH Server178
- Configuring the Switch as an SSH Client183
- Displaying and Maintaining SSH185
- SSH Server Configuration Examples185
  - When the Switch Acts as a Server for Password Authentication185
  - When the Switch Acts as a Server for Publickey Authentication187
- SSH Client Configuration Examples192
  - When the Switch Acts as Client for Password Authentication192
  - When the Switch Acts as Client for Publickey Authentication195
Configuring SFTP198
- Configuring the Switch as an SFTP Server198
- Configuring the Switch as an SFTP Client199
- SFTP Client Configuration Example201
- SFTP Server Configuration Example205
Configuring SSL208
- SSL Security Mechanism208
- SSL Protocol Stack208
- SSL Configuration Task List209
- Configuring an SSL Server Policy209
- Configuring an SSL Client Policy212
  - Configuration Prerequisites212
  - Configuration Procedure212
- Displaying and Maintaining SSL213
- Troubleshooting SSL213
  - SSL Handshake Failure213
Configuring TCP Attack Protection215
- Enabling the SYN Cookie Feature215
- Displaying and Maintaining TCP Attack Protection215
Configuring IP Source Guard216
- Static IP Source Guard Binding Entries216
- Dynamic IP Source Guard Binding Entries217
- IP Source Guard Configuration Task List217
- Configuring the Ipv4 Source Guard Function217
- Configuring the Ipv6 Source Guard Function219
- Displaying and Maintaining IP Source Guard221
- IP Source Guard Configuration Examples222
- Troubleshooting IP Source Guard230
  - Cannot Configure Static Binding Entries or Dynamic Binding Function230
Configuring ARP Attack Protection231
- ARP Attack Protection Configuration Task List231
- Configuring ARP Defense against IP Packet Attacks232
- Configuring ARP Packet Rate Limit234
- Configuring Source MAC Address-Based ARP Attack Detection235
- Configuring ARP Packet Source MAC Address Consistency Check237
  - Configuration Procedure237
- Configuring ARP Active Acknowledgement237
- Configuring ARP Detection237
- Configuring ARP Automatic Scanning and Fixed ARP245
  - Configuration Procedure245
Configuring ND Attack Defense247
- Enabling Source MAC Consistency Check for ND Packets248
- Configuring the ND Detection Function248
  - Configuring ND Detection249
  - Displaying and Maintaining ND Detection249
- ND Detection Configuration Example249
- Network Diagram250
Configuring URPF252
- URPF Check Modes252
- How URPF Works252
- Network Application255
- URPF Configuration255
- URPF Configuration Examples255
Support and Other Resources257
- Contacting HP257
  - Subscription Service257
- Related Information257
  - Documents257
  - Websites257
- Conventions258
Index260

HP A5830 Series User Manual

Table of Contents

Other manuals for HP A5830 Series

Questions and Answers:

HP A5830 Series Specifications

Related product manuals

Brand	HP
Model	A5830 Series
Category	Switch
Language	English