BigIron RX Series Configuration Guide
xxix
53-1001810-01
Configuring 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . . .960
Configuring an authentication method list for 802.1x . . . . . .961
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .961
Configuring dynamic VLAN assignment for 802.1x ports . . . .962
Disabling and enabling strict security mode for dynamic filter
assignment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .963
Dynamically applying existing ACLs or MAC address filter . . .964
Configuring per-user IP ACLs or MAC address filters. . . . . . . .966
Enabling 802.1x port security. . . . . . . . . . . . . . . . . . . . . . . . . .966
Setting the port control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .967
Configuring periodic re-authentication. . . . . . . . . . . . . . . . . . .968
Re-authenticating a port manually . . . . . . . . . . . . . . . . . . . . . .968
Setting the quiet period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Setting the interval for retransmission of EAP-request/identity
frames. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Specifying the number of EAP-request/identity frame
retransmissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Specifying a timeout for retransmission of messages to the
authentication server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Specifying a timeout for retransmission of EAP-request frames to the
client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Initializing 802.1x on a port . . . . . . . . . . . . . . . . . . . . . . . . . . .970
Allowing multiple 802.1x clients to authenticate. . . . . . . . . . .970
Displaying 802.1x information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .972
Displaying 802.1x configuration information. . . . . . . . . . . . . .972
Displaying 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . 974
Clearing 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .975
Displaying dynamically assigned VLAN information . . . . . . . .975
Displaying information on MAC address filters and IP ACLs on an
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976
Displaying information about the dot1x-mac-sessions on each port
978
Sample 802.1x configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . .979
Point-to-point configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . .980
Hub configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .981
Chapter 34
Protecting Against Denial of Service Attacks
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983
Protecting against Smurf attacks. . . . . . . . . . . . . . . . . . . . . . . . . . .983
Avoiding being an intermediary in a Smurf attack. . . . . . . . . .984
ACL-based DOS-attack prevention . . . . . . . . . . . . . . . . . . . . . .984
Protecting against TCP SYN attacks. . . . . . . . . . . . . . . . . . . . . . . . .985
TCP security enhancement . . . . . . . . . . . . . . . . . . . . . . . . . . . .986
Displaying statistics due DoS attacks . . . . . . . . . . . . . . . . . . . . . . .988
Clear DoS attack statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .988
Chapter 35
Inspecting and Tracking DHCP Packets
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .989
Содержание Brocade DCX
Страница 40: ...xl BigIron RX Series Configuration Guide 53 1001810 01 ...
Страница 72: ...lxxii BigIron RX Series Configuration Guide 53 1001810 01 ...
Страница 88: ...16 BigIron RX Series Configuration Guide 53 1001810 01 Searching and filtering output 1 ...
Страница 300: ...228 BigIron RX Series Configuration Guide 53 1001810 01 Displaying IP information 7 ...
Страница 318: ...246 BigIron RX Series Configuration Guide 53 1001810 01 Deploying a LAG 8 ...
Страница 418: ...346 BigIron RX Series Configuration Guide 53 1001810 01 SuperSpan 12 ...
Страница 482: ...410 BigIron RX Series Configuration Guide 53 1001810 01 MRP CLI example 14 ...
Страница 506: ...434 BigIron RX Series Configuration Guide 53 1001810 01 Displaying VSRP information 15 ...
Страница 566: ...494 BigIron RX Series Configuration Guide 53 1001810 01 QoS for the oversubscribed 16 x 10GE modules 18 ...
Страница 582: ...510 BigIron RX Series Configuration Guide 53 1001810 01 Viewing Layer 2 ACLs 20 ...
Страница 634: ...562 BigIron RX Series Configuration Guide 53 1001810 01 Troubleshooting ACLs 21 ...
Страница 642: ...570 BigIron RX Series Configuration Guide 53 1001810 01 Trunk formation 22 ...
Страница 746: ...674 BigIron RX Series Configuration Guide 53 1001810 01 Displaying RIP filters 24 ...
Страница 808: ...736 BigIron RX Series Configuration Guide 53 1001810 01 Displaying OSPF information 25 ...
Страница 926: ...854 BigIron RX Series Configuration Guide 53 1001810 01 Generalized TTL security mechanism support 26 ...
Страница 938: ...866 BigIron RX Series Configuration Guide 53 1001810 01 Displaying MBGP information 27 ...
Страница 950: ...878 BigIron RX Series Configuration Guide 53 1001810 01 Using secure copy 28 ...
Страница 988: ...916 BigIron RX Series Configuration Guide 53 1001810 01 Clearing IS IS information 29 ...
Страница 998: ...926 BigIron RX Series Configuration Guide 53 1001810 01 Configuring BFD for the specified protocol 30 ...
Страница 1014: ...942 BigIron RX Series Configuration Guide 53 1001810 01 Displaying multi device port authentication information 31 ...
Страница 1054: ...982 BigIron RX Series Configuration Guide 53 1001810 01 Sample 802 1x configurations 33 ...
Страница 1072: ...1000 BigIron RX Series Configuration Guide 53 1001810 01 IP source guard 35 Syntax show ip source guard ethernet port num ...
Страница 1108: ...1036 BigIron RX Series Configuration Guide 53 1001810 01 sFlow 39 ...
Страница 1190: ...1118 BigIron RX Series Configuration Guide 53 1001810 01 Displaying RIPng information 44 ...
Страница 1270: ...1198 BigIron RX Series Configuration Guide 53 1001810 01 Displaying ACLs 47 ...
Страница 1310: ...1238 BigIron RX Series Configuration Guide 53 1001810 01 Displaying OSPFv3 information 48 ...
Страница 1382: ...1310 BigIron RX Series Configuration Guide 53 1001810 01 Commands That Require a Reload D ...
Страница 1435: ...BigIron RX Series Configuration Guide 1363 53 1001810 01 VSRP E ...
Страница 1436: ...1364 BigIron RX Series Configuration Guide 53 1001810 01 VSRP E ...