Brocade BigIron RX Series Configuration Guide User Manual

Page 63

Advertising
background image

BigIron RX Series Configuration Guide

lxiii

53-1002484-04

IP Source Guard

IP source guard is used on client ports to prevent IP
source address spoofing.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Inspecting and

Tracking DHCP Packets.”

Section:

“IP source guard”

Dynamic ARP Inspection

Dynamic ARP Inspection (DAI) is a security feature
that can prevent Man-in-the-Middle (MiM) or ARP
spoofing/poisoning attacks.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Inspecting and

Tracking DHCP Packets”

Section:

“Dynamic ARP

inspection”

DHCP Snooping with Option 82 This feature allows the device to snoop DHCP

packets for Dynamic ARP inspection and allows for
the insertion of DHCP Option 82 attributes into the
DHCP packet prior to relaying to the DHCP server.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Inspecting and

Tracking DHCP Packets”

Section:

“DHCP relay agent

information (DHCP option
82)”

DoS Protection

This feature allows for monitoring the hit rate of the
ACL and drops matching traffic above a selected
rate and locking the port if the rate exceeds a
maximum allowed amount.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Protecting

Against Denial of Service
Attacks”

Section:

“ACL-based

DOS-attack prevention”

Super ACLs

Super ACLs can match on any field in a packet
header from Layer 2 to Layer 4. Super ACLs support
all options currently supported in ACL and MAC
ACL, including QoS marking. Super ACLs may be
assigned numbered IDs only, from 500 - 599.

Book: Foundry BigIron RX
Configuration Guide

Chapter: Access Control
List

ACL-Based Mirroring

With this release, the Multi-Service IronWare
software supports using an ACL to select traffic for
mirroring from one port to another.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Access Control

List”

Section:

“ACL-based

inbound mirroring”

ip dns domain-list command

This feature is designed to define a list od domain
names that are used in order to resolve a host.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Configuring IP”

Section:

“Defining a DNS

entry”

CLI Logging

This feature provides the logging of all valid CLI
commands from each user session into the system
log.

Book: BigIron RX Series
Configuration Guide
Chapter:

“Using Syslog”

Section:

“Logging all CLI

commands to Syslog”

TABLE 14

Summary of enhancements in release 02.4.00 (Continued)

Enhancement

Description

See page

Advertising