H3C S5830V2 series, Security Configuration Manual, Page: 307 / 332

293
mode entry (manual reboot), 237
mode system changes, 234
public key FIPS compliance, 115
security AAA FIPS compliance, 17
security IPsec FIPS compliance, 244
security IPsec IKE compliance, 266
security PKI compliance, 128
security SSH FIPS compliance, 162
self-test, 235
SSL FIPS compliance, 198
FIPS compliance
password control, 107
fixed ARP configuration, 222
format
security 802.1X EAP packet format, 61
security 802.1X EAPOL packet format, 61
security 802.1X packet, 61
security AAA HWTACACS username, 33
security AAA RADIUS packet format, 4
security AAA RADIUS username, 25
security MAC authentication user account, 80
forwarding
security ARP restricted forwarding, 220
security IP source guard
configuration,
202 , 203 , 206
security IPv4 source guard dynamic
configuration with DHCP relay, 210
security IPv4 source guard dynamic
configuration with DHCP snooping, 208
security IPv4 source guard static
configuration, 206
security IPv6 source guard static
configuration, 211
fragment
security IPsec packet DF bit configuration, 256
FTP
security local host public key distribution, 117
security SSH SFTP client device
configuration, 171
security SSH SFTP client publickey
authentication,
191
security SSH SFTP client source IP
address/interface,
171
security SSH SFTP configuration, 189
security SSH SFTP directories, 173
security SSH SFTP files, 173
security SSH SFTP server connection
establishment, 171
security SSH SFTP server connection
termination, 174
security SSH SFTP server password
authentication, 189
Fully Qualified Domain Name. Use FQDN
G
gateway
security ARP gateway protection, 223 , 224
generating
security SSH local DSA key pair, 162
security SSH local RSA key pair, 162
H
H3C
security AAA RADIUS H3C proprietary
attributes, 15
handshake function (802.1X online user), 72
handshake protocol (SSL), 197
history
security password history, 106
HTTP
security SSL configuration, 197 , 198
HW Terminal Access Controller Access Control System.
Use HWTACACS
HWTACACS
AAA configuration, 1 , 17
AAA for SSH user, 44
AAA implementation, 7
AAA local user configuration, 18
AAA MPLS L3VPN implementation, 13
AAA scheme configuration, 18
accounting server specification, 32
authentication server specification, 31
authorization server specification, 31
displaying, 36
HWTACACS/RADIUS differences, 7
maintaining, 36
outgoing packet source IP address, 34
packet exchange process, 7
protocols and standards, 13
real-time accounting timer, 35
scheme configuration, 30
scheme creation, 30