Brocade FastIron Ethernet Switch Security Configuration Guide - Manual (Page 390)

age 220
arp inspection trust 335
dhcp snooping relay information 345
dhcp snooping relay information option subscriber-
id
346
dot1x auth-filter 251
dot1x auth-timeout-action failure 182 , 183
dot1x auth-timeout-action success 182
dot1x port-control auto 191
dot1x re-auth-timeout- success 182
enable 219
idhcp snooping trust 339 , 358
ip access-group frag deny 128
ip icmp burst-normal burst-max lockupcommand
ip icmp burst-normal 324
ip policy route-map 148
ip tcp burst-normal burst-max lockupcommand
ip tcp burst-normal 326
ip use-acl-on-arp 133
mac-authentication apply-mac-auth-filter 261
mac-authentication auth-fail-action block-traffic 260
mac-authentication auth-fail-action restrict-vlan 272
mac-authentication auth-fail-vlan-id 260
mac-authentication auth-timeout-action failure 272
mac-authentication auth-timeout-action success
272
mac-authentication clear-mac-session 269
mac-authentication disable-aging 235 , 270
mac-authentication disable-ingress-filteringcommand
mac-authentication disable-ingress-filtering 263
mac-authentication dos-protecti 267
mac-authentication enable 259
mac-authentication enable-dynamic-vlan 261
mac-authentication max-accepted-session 273
mac-authentication move-back-to-old-vlan 264
mac-authentication no-override-restrict-vlan 262
mac-authentication source-guard-protection enable
268
mac filter-group log-enable 248 , 250
mac filter log-enable 250
maximum 219
per-vlan 131
port security 219
restrict-vlan 260
secure-mac-address 221
set interface null0 147
source-guard enable 351
use-radius-server 66
violation restrict 222
violation restrictcommand
violation restrict 222
violation shutdown 223
IP source guard
configuration notes and feature limitations 349
IPv6
ACL configuration notes 155
ACL traffic filtering criteria 154
configuring an ACL 156
creating an ACL 158
default and implicit ACL action 157
protocol names and numbers 154
IPv6 ACL
adding a comment to an entry 165
applying to a trunk group 165
command syntax descriptions 160
configuring for ICMP 159
configuring for TCP 159
configuring for UDP 160
deleting a comment from an entry 166
displaying 168
enabling on an interface 164
permit | deny 159
router remark 165
support for logging 166
IPv6 RA guard 361
L
Local User Database
delete-all 297
import-users tftp filename 298
no username 297
username < 296
login attempts, specifying maximum number for Telnet
access
27
M
MAC address
configuring the maximum per port 235
filters command syntax 248
filters for EAP frames 198
MAC addresses
displaying 239
displaying in a MAC-based VLAN 242
MAC address filter
command syntax 250
enabling logging of management traffic 249
override for 802.1x-enabled ports 251
MAC-based VLAN
390 FastIron Ethernet Switch Security Configuration Guide
53-1003088-03