R211x-HP Flexfabric 11900 Security Configuration Guide

267
security password control local user
parameters, 112
loggin
g
security IPsec packet logging enable, 142
sec
urity password events, 109
loggin
g in
security AAA max concurrent logins, 46
login
security password expired login, 107
sec
urity password user first login, 108
sec
urity password user login attempt limit, 108
s
ecurity password user login control, 108
M
MA
C
address. See MAC address
a
uthentication. See MAC authentication
MA
C address
MAC local authentication configuration, 84
R
ADIUS-based MAC authentication
configuration, 85
sec
urity 802.1X authentication (access device
initiated), 64
sec
urity 802.1X authentication
(client-initiated), 64
sec
urity IP source guard
configuration, 205, 206
sec
urity IPv4 source guard dynamic
configuration with DHCP relay, 214
sec
urity IPv4 source guard dynamic
configuration with DHCP snooping, 213
sec
urity IPv4 source guard static
configuration, 211
sec
urity IPv6 source guard static
configuration, 215
sec
urity MAC authentication
configuration, 79, 80, 84
MA
C addressing
IP source guard configuration, 211
por
t security macAddressWithRadius, 91
por
t security secure MAC address
configuration, 95
por
t security secure MAC address port limit, 92
sec
urity ARP attack protection
configuration, 216
sec
urity ARP packet source MAC consistency
check, 222
sec
urity ARP source MAC-based attack
detection, 220, 221
tr
oubleshooting port security secure MAC
addresses, 105
MA
C authentication
configuration, 79, 80, 84
dela
y configuration, 83
displa
ying, 83
do
main specification, 81
enable
, 80
local a
uthentication, 79, 84
main
taining, 83
max n
umber concurrent port users configuration, 82
por
t security authentication control mode, 88
por
t security client macAddressElseUserLoginSecure
configuration, 102
por
t security client userLoginWithOUI
configuration, 99
por
t security configuration, 88, 91 , 97
por
t security feature configuration, 94
por
t security intrusion protection configuration, 94
por
t security MAC address autoLearn mode
configuration, 97
por
t security MAC move, 96
por
t security MAC/802.1X authentication, 91
por
t security mode, 93
por
t security NTK configuration, 94
RA
DIUS-based, 79
sec
urity RADIUS-based, 85
timer conf
iguration, 82
u
ser account format, 81
u
ser account policies, 79
MA
C learning
port security autoLearn MAC learning control, 90
por
t security MAC learning control modes, 88
por
t security secure MAC learning control, 90
mac
AddressElseUserLoginSecure, 102
main
taining
security 802.1X, 75
s
ecurity AAA HWTACACS, 37
s
ecurity AAA RADIUS, 31
sec
urity ARP detection, 227
sec
urity crypto engine, 240
sec
urity IP source guard, 210
sec
urity IPsec, 14 3