Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario Pagina 11

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 370
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 10
Multi-Service IronWare Security Configuration Guide xi
53-1003035-02
Configuring 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . . .303
Configuring an authentication method list
for 802.1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .304
Configuring dynamic VLAN assignment for
802.1x ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .305
Disabling and enabling strict security mode for
dynamic filter assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . .306
Dynamically applying existing ACLs or MAC
address filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .308
Configuring per-user IP ACLs or MAC address filters. . . . . . . .309
Enabling 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . .310
Setting the port control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
Configuring periodic re-authentication . . . . . . . . . . . . . . . . . . .311
Re-authenticating a port manually . . . . . . . . . . . . . . . . . . . . . .312
Setting the quiet period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .312
Setting the interval for retransmission of
EAP-request or identity frames . . . . . . . . . . . . . . . . . . . . . . . . .312
Specifying the number of EAP-request or
identity frame retransmissions . . . . . . . . . . . . . . . . . . . . . . . . .313
Specifying a timeout for retransmission of messages
to the Authentication Server . . . . . . . . . . . . . . . . . . . . . . . . . . .313
Specifying a timeout for retransmission of
EAP-request frames to the client . . . . . . . . . . . . . . . . . . . . . . .313
Initializing 802.1x on a port . . . . . . . . . . . . . . . . . . . . . . . . . . .314
Allowing multiple 802.1x clients to authenticate. . . . . . . . . . . 314
Displaying 802.1x information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .315
Displaying 802.1x configuration information. . . . . . . . . . . . . .315
Displaying 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . .318
Clearing 802.1x statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319
Displaying dynamically assigned VLAN information . . . . . . . .320
Displaying information on MAC address filters
and IP ACLs on an interface . . . . . . . . . . . . . . . . . . . . . . . . . . .320
Displaying information about the dot1x-mac-sessions
on each port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .322
Sample 802.1x configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . .323
Point-to-point configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . .323
Hub configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325
Chapter 9 Protecting against Denial of Service Attacks
Protecting against smurf attacks . . . . . . . . . . . . . . . . . . . . . . . . . . .327
Avoiding being an intermediary in a smurf attack . . . . . . . . . .328
Avoiding being a victim in a smurf attack . . . . . . . . . . . . . . . .328
Protecting against TCP SYN attacks . . . . . . . . . . . . . . . . . . . . . . . .330
TCP security enhancement . . . . . . . . . . . . . . . . . . . . . . . . . . . .331
Protecting against UDP attacks . . . . . . . . . . . . . . . . . . . . . . . .332
Enhanced DOS attack prevention for IPv6. . . . . . . . . . . . . . . .333
Displaying statistics from a DoS attack . . . . . . . . . . . . . . . . . . . . . .334
Clear DoS attack statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334
Vista de pagina 10
1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 369 370

Comentarios a estos manuales

Sin comentarios