HPE 704654-B21, Security Configuration Manual

Page: 527 / 540

514
802.1X protocol packet sending rule, 91
protocols
client and local portal server interaction, 125
protocols and standards
802.1X overview, 64
802.1X related protocols, 65
AAA, 13
AAA HWTACACS, 6 , 13
AAA LDAP, 9 , 13
AAA RADIUS, 2 , 13
IPsec, 262
IPsec IKE, 290
IPsec IKEv2, 307
IPsec IPv6 routing protocols
configuration,
276
IPsec security protocol 50 (ESP), 258
IPsec security protocol 51 (AH), 258
MFF, 425
SSL configuration, 385 , 386
SSL protocol stack, 385
public key
display, 220
file import, 222
FIPS compliance, 216
host public key display, 218
host public key export, 218
local host public key distribution, 218
local key pair creation, 216
local key pair destruction, 219
management, 216 , 220
peer configuration, 219
peer host public key import from file, 219
peer public key entry, 219 , 220
SSH client host public key configuration, 331
SSH password-publickey authentication, 326
SSH publickey authentication, 326
SSH Secure Telnet client publickey
authentication,
358
SSH Secure Telnet server publickey
authentication,
349
SSH SFTP client publickey
authentication,
366
SSH user configuration, 332
Public Key Infrastructure. Use PKI
Q
QoS
IPsec QoS pre-classify enable, 274
user profile configuration, 447
QoS or CAR parameters
configuring, 447
quiet
MAC authentication quiet timer, 108
quiet timer
802.1X, 85
R
RA
PKI architecture, 226
PKI certificate, 225
RADIUS
802.1X EAP over RADIUS, 66
802.1X EAP relay enable, 81
802.1X EAP termination enable, 81
802.1X RADIUS EAP-Message attribute, 66
802.1X RADIUS Message-Authentication
attribute,
67
AAA configuration, 1 , 17 , 50
AAA implementation, 2
AAA local user configuration, 18
AAA MPLS L3VPN implementation, 13
AAA NAS-ID profile configuration, 49
AAA scheme, 18
accounting server parameters, 24
accounting-on configuration, 31
applying interface NAS-ID profile, 141
attributes, 14
authentication server, 23
client/server model, 2
common standard attributes, 14
DAE server, 48
display, 33
extended attributes, 6
HPE proprietary attributes, 6 , 15
HWTACACS/RADIUS differences, 7
information exchange security, 2
Login-Service attribute check method, 32
MAC authentication, 103
MAC authentication (RADIUS-based), 117
MAC authentication authorization VLAN, 104
maintain, 33
outgoing packet source IP address, 29
packet exchange process, 3
packet format, 3
port security macAddressWithRadius, 187
port security NAS-ID profile, 194
protocols and standards, 13
request transmission attempts max, 27
scheme configuration, 22
scheme creation, 23
scheme VPN instance specification, 26
security policy server IP address, 31