R211x-HP Flexfabric 11900 Security Configuration Guide

278
max request transmission attempts, 26
outgoing packet source IP address, 28
pac
ket exchange process, 3
pac
ket format, 4
por
t security macAddressWithRadius, 91
pr
otocols and standards, 13
r
eal-time accounting timer, 29
s
cheme configuration, 23
s
cheme creation, 23
sc
heme VPN specification, 25
sec
urity 802.1X EAP over RADIUS, 63
s
ecurity 802.1X EAP relay enable, 70
sec
urity 802.1X EAP termination enable, 70
sec
urity 802.1X RADIUS EAP-Message
attribute, 64
sec
urity 802.1X RADIUS
Message-Authentication attribute, 64
sec
urity MAC authentication, 79
sec
urity policy server IP address
configuration, 30
sec
urity RADIUS-based MAC authentication
configuration, 85
se
rver quiet timer, 29
se
rver response timeout timer, 29
se
rver status, 27
s
ession-control feature configuration, 45
shar
ed keys specification, 25
S
NMP notification enable, 31
S
SH user authentication+authorization, 50
S
SH user local authentication+HWTACACS
authorization+RADIUS accounting, 48
tr
affic statistics units, 26
tr
oubleshooting, 58
tr
oubleshooting accounting error, 59
tr
oubleshooting authentication failure, 58
tr
oubleshooting packet delivery failure, 58
u
ser authentication methods, 2
u
sername format, 26
ra
te
security ARP packet rate limit configuration, 219
re
al-time
security AAA HWTACACS real-time accounting
timer, 36
s
ecurity AAA RADIUS real-time accounting
timer, 29
re
coverinng
security IPsec IKE invalid SPI recovery, 159
re
lay agent
security authorized ARP (DHCP relay agent), 224
re
mote
security AAA remote accounting method, 12
sec
urity AAA remote authentication, 12
sec
urity AAA remote authentication
configuration, 17
s
ecurity AAA remote authorization method, 12
R
emote Authorization Dial-In User Service. Use RADIUS
r
estricted forwarding configuration (ARP), 227
re
strictions
FIPS configuration restrictions, 241
I
Psec policy configuration (IKE-based), 137
sec
urity IPsec configuration restrictions, 135
ro
uting
security 802.1X authentication configuration, 76
sec
urity 802.1X configuration, 69, 69
sec
urity SSH configuration, 169
sec
urity SSH server configuration, 171
RS
A
security IPsec IKE signature authentication, 151
sec
urity public key management, 117 , 122
sec
urity SSH client host public key
configuration, 173
sec
urity SSH management parameters, 175
sec
urity SSH RSA host key pair, 171
sec
urity SSH RSA server key pair, 171
sec
urity SSH SFTP client publickey
authentication, 199
sec
urity SSH Stelnet server publickey
authentication, 186
ru
le
security IPsec ACL rule keywords, 133
S
SA
security IKE SA max number set, 159
sec
urity IPsec SA negotiation failure (invalid identity
info), 165
sec
urity IPsec SA negotiation failure (no transform
set match), 165
sec
urity IPsec transform set configuration, 133
sa
ving
security host public key to file, 12 0
SC
P