beautypg.com
viii
Configuring ARP blackhole routing ··················································································································· 323
Displaying and maintaining unresolvable IP attack protection ······································································ 324
Configuration example ······································································································································· 324
Configuring ARP packet rate limit ······························································································································ 325
Configuration guidelines ···································································································································· 325
Configuration procedure ···································································································································· 325
Configuring source MAC-based ARP attack detection ···························································································· 326
Configuration procedure ···································································································································· 326
Displaying and maintaining source MAC-based ARP attack detection ························································· 327
Configuration example ······································································································································· 327
Configuring ARP packet source MAC consistency check ························································································ 328
Configuring ARP active acknowledgement ··············································································································· 328
Configuring authorized ARP ······································································································································· 329
Configuration procedure ···································································································································· 329
Configuring ARP detection ·········································································································································· 329
Configuring user validity check ························································································································· 329
Configuring ARP packet validity check ············································································································· 330
Configuring ARP restricted forwarding ············································································································· 331
Displaying and maintaining ARP detection ······································································································ 331
User validity check and ARP packet validity check configuration example ·················································· 332
Configuring ARP scanning and fixed ARP ················································································································ 333
Configuration restrictions and guidelines ········································································································· 333
Configuration procedure ···································································································································· 334
Configuring ARP gateway protection ························································································································ 334
Configuration guidelines ···································································································································· 334
Configuration example ······································································································································· 335
Configuring ARP filtering ············································································································································· 335
Configuration guidelines ···································································································································· 335
Configuration procedure ···································································································································· 336
Configuration example ······································································································································· 336
Configuring MFF ····················································································································································· 338
Overview ······································································································································································· 338
Basic concepts ····················································································································································· 339
MFF operation modes ········································································································································· 339
MFF working mechanism ···································································································································· 340
Protocols and standards ····································································································································· 340
Configuring MFF ·························································································································································· 340
Enabling MFF ······················································································································································· 340
Configuring a network port ································································································································ 340
Enabling periodic gateway probe ···················································································································· 341
Specifying the IP addresses of servers ·············································································································· 341
Displaying and maintaining MFF ······························································································································· 342
MFF configuration examples ······································································································································· 342
Manual-mode MFF configuration example in a tree network ········································································· 342
Manual-mode MFF configuration example in a ring network ········································································ 343
Configuring crypto engines ···································································································································· 346
Overview ······································································································································································· 346
Displaying and maintaining crypto engines ············································································································· 346
Configuring FIPS······················································································································································ 347
Overview ······································································································································································· 347
Configuration restrictions and guidelines ·················································································································· 347
Configuring FIPS mode ················································································································································ 348
