R211x-HP Flexfabric 11900 Security Configuration Guide

272
password
security SSH password authentication, 170
sec
urity SSH password-publickey
authentication, 170
sec
urity SSH SCP file transfer with password
authentication, 203
sec
urity SSH SFTP server password
authentication, 197
sec
urity SSH Stelnet client password
authentication, 192
sec
urity SSH Stelnet server password
authentication, 184
pa
ssword control
configuration, 106, 109, 114
displa
ying, 113
enable
, 109
e
vent logging, 109
e
xpired password login, 107
FI
PS compliance, 109
global par
ameters, 110
loc
al user parameters, 112
main
taining, 113
max u
ser account idle time, 108
pa
ssword complexity checking, 107
pa
ssword composition checking, 106
p
assword expiration, 107, 107
pa
ssword history, 108
pa
ssword minimum length, 106
pa
ssword not displayed, 108
p
assword setting, 106
pa
ssword updating, 107, 107
sup
er parameters, 113
use
r first login, 108
u
ser group parameters, 111
u
ser login attempt limit, 108
use
r login control, 108
peer
sec
urity IPsec implementation, 13 0
sec
urity IPsec SA, 129
sec
urity IPsec source interface policy bind, 141
sec
urity peer host public key import from
file, 121
sec
urity peer public key entry, 121
sec
urity public key peer configuration, 121
P
erfect Forward Secrecy. See PFS
PFS (IKE), 152
PK
I
security public key management, 117 , 122
poli
cy
security AAA RADIUS security policy server IP
address configuration, 30
sec
urity IPsec application to interface, 139
sec
urity IPsec configuration, 135
sec
urity IPsec policy (IKE-based), 137
sec
urity IPsec QoS pre-classify enable, 141
sec
urity IPsec source interface policy bind, 141
sec
urity IPsec transform set configuration, 133
sec
urity MAC authentication user account
policies, 79
s
ecurity password control
configuration, 106, 109, 114
por
t
security. See port security
sec
urity MAC authentication
configuration, 79, 80, 84
sec
urity MAC authentication delay
configuration, 83
sec
urity MAC authentication max number
concurrent port users configuration, 82
sec
urity MAC local authentication configuration, 84
sec
urity RADIUS-based MAC authentication
configuration, 85
por
t security
802.1X access control method, 71
8
02.1X authentication, 90
8
02.1X authentication configuration, 76
8
02.1X authorization state, 71
8
02.1X authorization status, 61
80
2.1X configuration, 69, 69
8
02.1X controlled/uncontrolled, 61
8
02.1X mandatory port authentication domain, 74
8
02.1X max number users, 71
8
02.1X overview, 61
a
uthentication modes, 88
c
lient macAddressElseUserLoginSecure
configuration, 102
c
lient userLoginWithOUI configuration, 99
c
onfiguration, 88, 91 , 97
displa
ying, 97
enabli
ng, 92
f
eature configuration, 94
fe
atures, 88