HP VPN Firewall Appliances Network Management Configuration Guide

xx
Configuring MLD SSM mapping ································································································································ 915
Configuration prerequisites ································································································································ 915
Enabling MLD SSM mapping ····························································································································· 915
Configuring MLD SSM mapping entries ··········································································································· 916
Configuring MLD proxying ········································································································································· 916
Configuration prerequisites ································································································································ 916
Enabling MLD proxying ······································································································································ 916
Configuring IPv6 multicast forwarding on a downstream interface ······························································ 917
Displaying and maintaining MLD ······························································································································· 917
MLD configuration examples ······································································································································ 918
Basic MLD functions configuration example ····································································································· 918
MLD SSM mapping configuration example ····································································································· 920
MLD proxying configuration example ··············································································································· 923
Troubleshooting MLD ··················································································································································· 925
No member information exists on the receiver-side router ············································································· 925
Membership information is inconsistent on the routers on the same subnet ················································· 926
Configuring routing policies ··································································································································· 927
Overview ······································································································································································· 927
Filters ····································································································································································· 927
Configuring filters ························································································································································· 928
Configuration prerequisites ································································································································ 928
Configuring an IP prefix list ································································································································ 928
Configuring an AS path list ································································································································ 929
Configuring a community list ····························································································································· 929
Configuring an extended community list ·········································································································· 930
Configuring a routing policy ······································································································································· 930
Configuration prerequisites ································································································································ 930
Creating a routing policy ··································································································································· 930
Configuring if-match clauses ······························································································································ 931
Configuring apply clauses ·································································································································· 932
Configuring a continue clause ··························································································································· 934
Displaying and maintaining the routing policy ········································································································· 935
Routing policy configuration examples ······················································································································ 935
Applying a routing policy to IPv6 route redistribution ····················································································· 935
Applying a routing policy to filter received BGP routes ·················································································· 937
Troubleshooting routing policy configuration ··········································································································· 939
IPv4 routing information filtering failure············································································································ 939
IPv6 routing information filtering failure············································································································ 939
Configuring SSL ······················································································································································· 941
Overview ······································································································································································· 941
SSL security mechanism ······································································································································ 941
SSL protocol stack ··············································································································································· 942
FIPS compliance ··························································································································································· 942
Configuration task list ·················································································································································· 942
Configuring an SSL server policy ······························································································································· 942
HTTPS login using CA certificate configuration example ························································································ 944
Network requirements ········································································································································· 944
Configuration procedure ···································································································································· 944
HTTPS login using the default certificate configuration example ············································································ 946
Network requirements ········································································································································· 946
Configuration procedure ···································································································································· 946
Configuring an SSL client policy ································································································································ 947
Displaying SSL ······························································································································································ 948