HPE 704654-B21, Security Configuration Manual

Page: 534 / 540

521
802.1X authentication request attempts max
number,
82
802.1X authentication timeout timers, 83
802.1X port authorization state, 81
802.1X port users max number, 82
802.1X quiet timer, 85
AAA concurrent login user max, 48
AAA HWTACACS timer, 38
AAA HWTACACS traffic statistics unit, 37
AAA HWTACACS username format, 37
AAA LDAP server timeout period, 41
AAA RADIUS request transmission attempts
max,
27
AAA RADIUS server status, 27
AAA RADIUS timer, 30
AAA RADIUS traffic statistics unit, 26
AAA RADIUS username format, 26
IPsec IKE SA max number, 297
IPsec packet DF bit set, 275
MAC authentication concurrent port users
max,
109
MAC authentication timer, 108
port security mode, 189
security password, 205
security password control global
parameters,
209
security password control local user
parameters,
211
security password control user group
parameters,
210
security portal authentication max number
users,
135
security super password control
parameters,
211
SFTP
client device configuration, 338
client publickey authentication, 366
configuration, 364
configuration (192-bit Suite B), 370
directories, 341
files, 341
help information display, 341
server connection establishment, 338
server connection establishment based on
Suite B,
340
server connection termination, 342
server enable, 329
server password authentication, 364
SFTP packet source IP address, 338
SSH application, 325
SSH management parameters, 333
shared key
AAA HWTACACS, 36
AAA RADIUS, 25
signature authentication (IKE), 289
single-packet attack
attack D&P defense policy, 456
attack D&P device-preventable attacks, 452
attack D&P log aggregation disable, 463
attack type, 452
SNMP
AAA RADIUS notifications, 32
IPsec IKE SNMP notification, 298
IPsec SNMP notification, 277
software
crypto engine configuration, 435
source
ARP attack detection (source
MAC-based),
405 , 406
ARP src-mac validity check, 412
security portal authentication portal-free rule, 132
security portal authentication subnet, 133
source MAC consistency check
configuration, 469
specifying
802.1X access control method, 82
802.1X mandatory port authentication domain, 85
802.1X supported domain name delimiters, 91
AAA HWTACACS accounting server, 35
AAA HWTACACS authentication server, 34
AAA HWTACACS authorization server, 34
AAA HWTACACS outgoing packet source IP
address,
37
AAA HWTACACS scheme VPN instance, 36
AAA HWTACACS shared keys, 36
AAA LDAP authentication server, 42
AAA LDAP version, 40
AAA RADIUS accounting server parameters, 24
AAA RADIUS authentication server, 23
AAA RADIUS outgoing packet source IP
address,
29
AAA RADIUS scheme VPN instance, 26
AAA RADIUS shared keys, 25
MAC authentication domain, 107
MFF server IP address, 426
PKI CA storage path, 235
security portal authentication domain, 135
SSH packet source IP address, 335
SSH server PKI domain, 334
SSH SFTP packet source IP address, 338
SSH2 algorithms, 344
SPI
IPsec IKE invalid SPI recovery, 297