Access Security Guide K/KA/KB.15.15

Authority-signed certificate, 257
authorized addresses
for IP management security, 420
for port security, 398
authorized IP managers
access-method, 414
building IP masks, 417
configuring in console, 413
definitions of single and multiple, 420
effect of duplicate IP addresses;duplicate IP
address:effect on authorized IP managers, 421
IP mask for single station, 417
IP mask operation, 420
manager, operator;, 414
operating notes, 421
overview, 413
troubleshooting, 421
authorized,
option for authentication, 145
autorun
autorun-key; autorun-key, 229
B
blocked hosts, 57
BPDU filtering;BPDU protection;spanning tree
security features, 447
C
cached reauthentication
client session termination, 182
timing considerations, 181
chap-radius
CHAP, 145
Clear button
to delete password protection, 22
Command Syntax
aaa port-access, 76
access-denied, 77
access-list, 207, 261
accounting, 159, 160, 162, 166, 173, 174
acct-port, 158
acl-name-str, 261
aclv4, 333
address format, 74
All, 22
arp-protect trust, 361
arp-protect vlan, 375
arp=protect validate, 362
auth-server, 94, 97
auth-vid, 85
authentication, 130, 131, 132, 145, 147, 150, 153,
165, 166, 171, 174, 236, 237, 250
authentication localuser, 178
authentication port-access, 466
authenticator, 200, 208
authenticator clients, 201
authorization, 169, 175
authorization group, 177, 179
authorized, 153
authorized client, 76
cached-reauth-period, 175
Clear, 41, 42
clear, 250
clear-statistics, 86
client-limit, 86
config, 508, 511
Configure, 74
Connection-rate-filter, 53, 59, 62
connection-rate-filter configure, 55
Connection-rate-filter ignore, 59
Connection-rate-filter IP Access-List, 58
Connection-rate-filter sensitivity, 54
Connection-rate-filter unblock, 58
connection-rate-filter-blocked-hosts, 57
controller-directions, 84
copy, 512
crypto key, 253, 254
crypto key generate, 229
crypto key generate ssh, 230
crypto pki clear certificate-name, 511
crypto pki create-csr local-certificate, 506
crypto pki create-self-signed certificate-name, 509
crypto pki identity-profile, 516
crypto pki indentity-profile, 506
crypto pki install-signed-certificate, 508
crypto pki local-certificate, 513
crypto pki ta-profile, 505, 515
crypto pki zeroize, 511
crypto public-key, 250
debug dynamic-ip-lockdown, 381
debug security crypto, 513
debug security dhcp-snoopingt, 375
destination-port-list, 432
dhcp-addr, 86
dhcp-snooping, 370, 371, 373, 374, 375
dhcp[-lease, 86
diagnostic-level, 503
display pki certificate, 516
drop, 432
eap-radius, 153, 166
Encrypt-Credentials, 36
encrypted-key, 129
Encrypted-Password, 35
extended, 271
filter, 449
filter source-port, 434
filter source-port named-filter, 428
forward 1 drop, 433
forward port-list, 432
Front Panel Security, 40, 41, 42, 43
front-panel-security, 44
host, 126
icmp-type, 269, 270, 275
icmp-type-name, 269
igmp, 270, 275
Ignore Connection-rate-filter, 59
Include-Credentials, 32, 34
instrumentation monitor, 364
527