H3C S5500-SI Series, Руководство по эксплуатации

Страница: 16 / 1217

3-7
Features Description
SSH2.0
SSH ensures secure login to a remote device in a non-secure network
environment. By encryption and strong authentication, it protects the
device against attacks. This document describes:
z
Configuring Asymmetric Keys
z
Configuring the Device as an SSH Server
z
Configuring the Device as an SSH Client
z
Configuring an SFTP Server
z
Configuring an SFTP Client
PKI
The Public Key Infrastructure (PKI) is a hierarchical framework designed
for providing information security through public key technologies and
digital certificates and verifying the identities of the digital certificate
owners. This document describes PKI related configuration.
SSL
Secure Sockets Layer (SSL) is a security protocol providing secure
connection service for TCP-based application layer protocols, this
document describes SSL related configuration.
Public Key
Configuration
This document describes Public Key Configuration.
ACL
An ACL is used for identifying traffic based on a series of preset matching
criteria. This document describes:
z
ACL overview and ACL types
z
ACL configuration
ARP Attack Protection
Currently, ARP attacks and viruses are threatening LAN security. The
device can provide multiple features to detect and prevent such attacks.
This document describes:
z
Configuring ARP Defense Against IP Packet Attacks
z
Configuring ARP Packet Rate Limit
z
Configuring Source MAC Address Based ARP Attack Detection
z
Configuring ARP Packet Source MAC Address Consistency Check
z
Configuring ARP Active Acknowledgement
z
Configuring ARP Detection
High Availability Volume
Table 3-7 Features in the High Availability Volume
Features Description
Smart Link
Smart Link is a solution for active-standby link redundancy backup and
rapid transition in dual-uplink networking. This document describes:
z
Smart Link Overview
z
Configuring a Smart Link Device
z
Configuring an Associated Device
Monitor Link
Monitor link is a port collaboration function used to enable a device to be
aware of the up/down state change of the ports on an indirectly connected
link. This document describes:
z
Monitor Link Overview
z
Configuring Monitor Link