R21xx-HP FlexFabric 11900 Security Configuration Guide

195
source MAC-based attack detection
configuration, 126
source suppression, 124
unresolvable IP attack protection configuration,
123
user/packet validity check, 133
ARP detection
IP source guard static binding entries, 113
attribute
AAA HWTACACS scheme configuration, 29
AAA ISP domain attribute configuration, 39
AAA LDAP scheme configuration, 35
AAA local user attribute configuration, 19
AAA local user configuration, 18
AAA RADIUS scheme configuration, 21
AAA scheme configuration, 18
AAA user group attribute configuration, 20
LDAP administrator attribute configuration, 37
LDAP user attribute configuration, 37
RADIUS, 13
RADIUS common standard attributes, 13
RADIUS extended attributes, 6
RADIUS H3C proprietary attributes, 15
authenticating
AAA configuration, 1, 16
LDAP authentication, 9
password control configuration, 57, 60, 64
RADIUS user authentication mechanisms, 2
SCP file transfer with password authentication,
110
SFTP client publickey authentication
configuration, 107
SFTP server password authentication
configuration, 105
SSH configuration, 77
SSH methods, 78
SSH server configuration, 79
Stelnet client password authentication
configuration, 100
Stelnet client publickey authentication
configuration, 103
Stelnet server password authentication
configuration, 92
Stelnet server publickey authentication
configuration, 94
authentication
algorithms (IPsec), 153
IPsec, 153
Authentication, Authorization, and Accounting. Use
AAA, Use AAA
authorization
RADIUS session-control feature configuration,
42
authorized ARP
configuration, 129
configuration (DHCP relay agent), 130
authorizing
AAA configuration, 1, 16
LDAP authorization, 9
automatic
ARP automatic scanning, 135
binding
source interface to IPsec policy, 166
black hole routing (ARP), 124
check
uRPF loose check mode, 139
uRPF strict check mode, 139
command
AAA command accounting method, 11
AAA command authorization method, 11
communication
entering peer public key, 72
public key management, 67
complexity policy (password control), 58