R211x-HP Flexfabric 11900 Security Configuration Guide

268
security IPsec IKE, 160
security IPv4 source guard, 210
sec
urity IPv6 source guard, 210
sec
urity MAC authentication, 83
s
ecurity password control, 113
managing
sec
urity public keys, 117, 122
mes
sage
security ARP attack protection
configuration, 216
minim
um password length, 106
mir
roring
security IPsec mirror image ACLs, 133
sec
urity IPsec non-mirror image ACLs, 133
mode
por
t security, 93
por
t security authentication control mode, 88
por
t security autoLearn MAC learning control
mode, 90
por
t security MAC learning control autoLearn
mode, 88
por
t security MAC learning control mode, 88
por
t security MAC learning control secure
mode, 88
por
t security macAddressWithRadius
authentication, 91
por
t security secure MAC learning control
mode, 90
s
ecurity 802.1X EAP relay/termination
comparison, 65
sec
urity 802.1X multicast trigger mode, 64
sec
urity 802.1X unicast trigger mode, 64
sec
urity IPsec ACL-based implementation
aggregation, 131
sec
urity IPsec ACL-based implementation
per-host, 131
sec
urity IPsec ACL-based implementation
standard, 131
sec
urity IPsec encapsulation transport, 128
sec
urity IPsec encapsulation tunnel, 128
sec
urity IPsec IKE negotiation, 129
sec
urity IPsec IKE negotiation (time-based
lifetime), 129
sec
urity IPsec IKE negotiation (traffic-based
lifetime), 129
sec
urity uRPF loose check, 234
sec
urity uRPF strict check, 234
u
serLogin 802.1X authentication mode, 90
u
serLoginSecure 802.1X authentication mode, 90
u
serLoginSecureExt 802.1X authentication
mode, 90
u
serLoginWithOUI 802.1X authentication mode, 90
MP
LS L3VPN
security AAA implementation, 13
mu
lticast
security 802.1X multicast trigger mode, 64, 73
N
NA
S
security AAA configuration, 17
s
ecurity AAA HWTACACS implementation, 7
s
ecurity AAA implementation, 11
s
ecurity AAA LDAP implementation, 9
s
ecurity AAA MPLS L3VPN implementation, 13
s
ecurity AAA RADIUS implementation, 2
sec
urity AAA RADIUS security policy server IP
address configuration, 30, 30
NA
T
security IPsec IKE keepalive function
configuration, 15 8
need t
o know. Use NTK
negoti
ating
security IPsec IKE negotiation, 150
sec
urity IPsec IKE negotiation mode, 129
net
work
port security feature configuration, 94
por
t security features, 88
por
t security intrusion protection configuration, 94
por
t security MAC address learning control, 90
por
t security mode, 88, 93
por
t security NTK configuration, 94
por
t security secure MAC address configuration, 95
por
t security secure MAC address port limit, 92
sec
urity 802.1X access control method, 71
s
ecurity 802.1X architecture, 61
sec
urity 802.1X authentication request max number
attempts, 72
sec
urity 802.1X authentication server timeout
timer, 72
sec
urity 802.1X authentication trigger function, 73
sec
urity 802.1X authorization state, 71
sec
urity 802.1X EAP relay authentication, 66