HP Switch 6120 Uživatelský manuál Strana 280
- Strana / 469
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
8-7
Configuring Advanced Threat Protection
DHCP Snooping
Figure 8-2. Example of Show DHCP Snooping Statistics
Enabling DHCP Snooping on VLANS
DHCP snooping on VLANs is disabled by default. To enable DHCP snooping
on a VLAN or range of VLANs enter this command:
ProCurve(config)# dhcp-snooping vlan <vlan-id-range>
You can also use this command in the vlan context, in which case you cannot
enter a range of VLANs for snooping.
Below is an example of DHCP snooping enabled on VLAN 4.
Figure 8-3. Example of DCHP Snooping on a VLAN
ProCurve(config)# show dhcp-snooping stats
Packet type Action Reason Count
----------- ------- ---------------------------- ---------
server forward from trusted port 8
client forward to trusted port 8
server drop received on untrusted port 2
server drop unauthorized server 0
client drop destination on untrusted port 0
client drop untrusted option 82 field 0
client drop bad DHCP release request 0
client drop failed verify MAC check 0
ProCurve(config)# dhcp-snooping vlan 4
ProCurve(config)# show dhcp-snooping
DHCP Snooping Information
DHCP Snooping : Yes
Enabled Vlans : 4
Verify MAC : Yes
Option 82 untrusted policy : drop
Option 82 Insertion : Yes
Option 82 remote-id : mac
- Access Security Guide 1
- Hewlett-Packard Company 2
- 3 Web and MAC Authentication 6
- 4 TACACS+ Authentication 7
- 10 Configuring Port-Based and 12
- Product Documentation 18
- Software Feature Index 19
- Intelligent Edge Software 20
- Features 20
- Security Overview 23
- Introduction 24
- Access Security Features 25
- Network Security Features 29
- Physical Security 31
- SNMP Security Guidelines 37
- Dynamic Configuration Arbiter 39
- Network Immunity Manager 40
- (IDM) 43
- Menu: Setting Passwords 49
- Security tab 52
- [Device Passwords] 52
- [Apply Changes] 52
- Credentials 54
- Password Command Options 55
- SNMP Security Credentials 56
- Restrictions 64
- Front-Panel Security 66
- Front-Panel Button Functions 67
- Clear Button 68
- Reset Button 68
- ResetClear 69
- Password Recovery 75
- [Y] (for “Yes”) 76
- [N] (for “No”) 76
- Password Recovery Process 77
- MAC Authentication 81
- RADIUS-Based Authentication 83
- Wireless Clients 83
- Web-based Authentication 84
- MAC-based Authentication 86
- Operating Rules and Notes 89
- Setup Procedure for Web/MAC 91
- Web and MAC Authentication 100
- ProCurve Switch (config)# 103
- Files (Optional) 111
- Customizing HTML Templates 112
- Customizable HTML Templates 113
- Overview 127
- Client Status 137
- TACACS+ Authentication 138
- Terminology Used in TACACS 140
- Applications: 140
- General System Requirements 142
- Note on 144
- Privilege Levels 144
- Before You Begin 145
- Configuration 146
- Server Contact Configuration 147
- Authentication Parameters 149
- Caution Regarding 153
- Login Primary 153
- Encryption Keys 156
- First-Choice TACACS+ Server 158
- write mem) 160
- How Authentication Operates 161
- Local Authentication Process 163
- Using the Encryption Key 164
- Access When Using TACACS+ 165
- Authentication 165
- Messages Related to TACACS+ 166
- Operation 166
- Operating Notes 166
- Accounting 168
- Contents 169
- Accounting Services 171
- Configuration MIB 171
- Terminology 172
- You Want RADIUS To Protect 177
- (hpSwitchAuth) is disabled 190
- Commands Authorization 193
- Enabling Authorization 194
- Additional RADIUS Attributes 203
- Configuring RADIUS Accounting 204
- Interim Updating Options 211
- Viewing RADIUS Statistics 213
- RADIUS Accounting Statistics 216
- as both the primary 220
- Prerequisite for Using SSH 225
- Public Key Formats 225
- Enable (Manager) Password 230
- Host Public 232
- Key for the 232
- Configuring Key Lengths 233
- Client Contact Behavior 235
- ■ Execute no ip ssh 237
- Note on Port 239
- Public-Key Authentication 244
- Bit Size Exponent <e> 246
- Modulus <n> 246
- Note on Public 247
- Key Index Number 249
- Logging Messages 251
- Debug Logging 252
- Prerequisite for Using SSL 257
- Password Button 260
- Security Tab 260
- Generate New Key 263
- Enter certificate Arguments 263
- Generate New Certificate 263
- Show host certificate command 264
- [SSL] button 266
- Web browser interface 267
- Browser Contact Behavior 269
- Common Errors in SSL setup 273
- DHCP Snooping 277
- Enabling DHCP Snooping 278
- The DHCP Binding Database 285
- Enabling Debug Logging 286
- Operational Notes 286
- Log Messages 287
- Dynamic ARP Protection 289
- Configuring Trusted Ports 291
- Dynamic IP Lockdown 296
- Prerequisite: DHCP Snooping 297
- Enabling Dynamic IP Lockdown 299
- Database 301
- Adding a Static Binding 302
- Bindings 303
- Debugging Dynamic IP Lockdown 304
- Examples 309
- Filter Types and Operation 313
- Source-Port Filters 314
- Named Source-Port Filters 316
- [ index ] 318
- * ), indicating that the 327
- Editing a Source-Port Filter 328
- Filter Indexing 329
- Configuring Port-Based and 331
- User Authentication Methods 334
- as defined in the 337
- 802.1X standard 337
- VLAN Membership Priority 340
- Access Control 344
- Authenticators 348
- Based Authentication 350
- Wake-on-LAN Traffic 357
- 802.1X Open VLAN Mode 359
- VLAN Membership Priorities 360
- Unauthorized-Client VLANs 366
- Configure Port-Security 375
- Port-Security 376
- Other Switches 377
- Supplicant Port Configuration 379
- Statistics, and Counters 381
- ■ The switch reboots 394
- Affects VLAN Operation 395
- VLAN Assignment on a Port 396
- Based Authentication Session 398
- After the 802.1X session 401
- < port-number >: 403
- Port Security 407
- Eavesdrop Protection 408
- Blocking Unauthorized Traffic 408
- Trunk Group Exclusion 409
- Planning Port Security 410
- Port Security Display Options 411
- Configuring Port Security 415
- listing 418
- use this command syntax: 418
- Retention of Static Addresses 420
- MAC Lockdown 425
- MAC Lockdown Operating Notes 428
- MAC Lockout 429
- # VLANs # Lockout MACs 431
- < = 1024 16 431
- 1025-2048 8 431
- Port Security and MAC Lockout 432
- Security Features 433
- Alert Flags 433
- Send-Disable 435
- Resetting Alert Flags 436
- Yes” for the port on which 437
- Using Authorized IP Managers 443
- Access Levels 445
- Stations 446
- Managers 447
- Building IP Masks 452
- IP Entry 453
- Numerics 457
- 2 – Index 458
- Index – 3 459
- 4 – Index 460
- Index – 5 461
- 6 – Index 462
- Index – 7 463
- 8 – Index 464
- Index – 9 465
- 10 – Index 466
- Index – 11 467
- 12 – Index 468
- *5992-5525* 469
Související produkty a manuály pro Software HP Switch 6120
Software HP BMD00022 Uživatelský manuál
(228 stránky)
(228 stránky)
Software HP SN6000 Uživatelská příručka
(122 stránky)
(122 stránky)
Software HP 3PAR Uživatelský manuál
(89 stránky)
(89 stránky)
Software HP NEOVIEW 544530-001 Uživatelský manuál
(142 stránky)
(142 stránky)
Software HP 700wl Uživatelský manuál
(388 stránky)
(388 stránky)
Software HP X9300 Instalační příručka
(151 stránky)
(151 stránky)
Software HP SP1 Uživatelský manuál
(143 stránky)
(143 stránky)
Software HP Q.11. (2510-24) Uživatelský manuál
(294 stránky)
(294 stránky)
Software HP 441877-00F Uživatelský manuál
(67 stránky)
(67 stránky)
Software HP 2000s Uživatelská příručka
(200 stránky)
(200 stránky)
Software HP 2012i Uživatelský manuál
(86 stránky)
(86 stránky)
Software HP XP12000 Uživatelský manuál
(38 stránky)
(38 stránky)
Software HP Moonshot-180G Uživatelská příručka
(719 stránky)
(719 stránky)
Software HP Transcend Traffix Manager Uživatelský manuál
(186 stránky)
(186 stránky)
Software HP 377707-002 Uživatelský manuál
(92 stránky)
(92 stránky)
Software HP 1TB Uživatelský manuál
(80 stránky)
(80 stránky)
Software HP M401dne Uživatelský manuál
(160 stránky)
(160 stránky)
Software HP 441877-00B Uživatelský manuál
(176 stránky)
(176 stránky)
© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.046 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce