HPE 704654-B21, Security Configuration Manual

Page: 506 / 540

493
IPsec encryption algorithm (3DES), 261
IPsec encryption algorithm (AES), 261
IPsec encryption algorithm (DES), 261
IPsec RIPng configuration, 284
IPsec tunnel for IPv4 packets
(IKE-based),
281
IPsec tunnel for IPv4 packets (manual), 279
peer public key entry, 220
public key import from file, 222
public key management, 216 , 220
SSH configuration, 325
SSH server configuration, 328
SSL services, 385
entering
FIPS mode (automatic reboot), 437 , 441
FIPS mode (manual reboot), 437 , 442
peer public key, 219 , 220
ESP
IPsec security protocol 50, 258
establishing
IPsec tunnel establishment, 262
SSH SCP server connection, 342
SSH SCP server connection based on Suite
B,
344
SSH Secure Telnet server connection, 335
SSH Secure Telnet server connection based
on Suite B,
337
SSH SFTP server connection, 338
SSH SFTP server connection based on Suite
B,
340
Ethernet
802.1X overview, 64
ARP attack protection configuration, 402
exempting
attack D&P detection exemption, 462
exiting
FIPS mode (automatic reboot), 439 , 444
FIPS mode (manual reboot), 439 , 444
exporting
host public key, 218
PKI certificate, 236
PKI certificate import/export, 247
troubleshooting PKI certificate export
failure,
256
extending
security portal authentication extended
cross-subnet,
166
security portal authentication extended
direct,
159
security portal authentication extended
re-DHCP,
162
F
fail-permit feature (portal), 140
Federal Information Processing Standard. Use FIPS
file
peer host public key import from file, 219
public key import from file, 222
SSH SCP file tpassword
authentication,
374
SSH SFTP, 341
filtering
ARP packets, 420 , 420
outgoing packets filtering on portal interface, 136
FIN flood, 459
FIPS
configuration, 436 , 441
configuration restrictions, 436
display, 441
mode configuration, 437
mode entry, 437
mode entry (automatic reboot), 441
mode entry (manual reboot), 442
mode exit, 439
mode exit (automatic reboot), 444
mode exit (manual reboot), 444
mode system changes, 438
self-test, 439
self-test trigger, 441
FIPS compliance
AAA, 16
IPsec, 262
IPsec IKE, 290
password control, 208
PKI, 228
public key, 216
SSH, 328
SSL, 386
fixed ARP
configuration, 417
configuration restrictions, 418
flood attack
attack D&P defense policy (ACK flood), 458
attack D&P defense policy (DNS flood), 461
attack D&P defense policy (FIN flood), 459
attack D&P defense policy (HTTP flood), 462
attack D&P defense policy (ICMP flood), 460
attack D&P defense policy (ICMPv6 flood), 460
attack D&P defense policy (RST flood), 459
attack D&P defense policy (SYN flood), 458
attack D&P defense policy (SYN-ACK flood), 459
attack D&P defense policy (UDP flood), 461