H3C S5830V2 series, Руководство по настройке безопасности, Страница: 301 / 332

287
security PKI certificate, 125
security PKI certificate export, 137
security PKI certificate obtain, 134
security PKI certificate removal, 138
security PKI certificate request, 131
security PKI certificate request (automatic), 132
security PKI certificate request (manual), 133
security PKI certificate request abort, 134
security PKI certificate verification, 135
security PKI CRL, 125
security PKI domain configuration, 129
security PKI entity configuration, 128
security PKI OpenCA server certificate
request, 146
security PKI RSA Keon CA server certificate
request, 140
security PKI storage path specification, 136
security PKI Windows 2003 CA server
certificate request, 142
troubleshooting PKI CA certificate import
failure, 157
troubleshooting PKI CA certificate obtain
failure, 155
certificate
authority. Use CA
revocation list. Use CRL
security PKI certificate verification (CRL
checking),
135
security PKI certificate verification (without CRL
checking), 136
change cipher spec protocol (SSL), 197
checking
security IPsec ACL de-encapsulated packet
check, 254
security PKI certificate verification (CRL
checking), 135
security PKI certificate verification (without CRL
checking), 136
security uRPF loose check mode,
227
security uRPF strict check mode, 227
classifying
security IPsec QoS pre-classify enable, 256
clearing
security IPsec packet DF bit clear, 256
client
security 802.1X authentication, 63
security 802.1X authentication (access device
initiated), 63
security 802.1X authentication (client-initiated), 62
security 802.1X authentication client timeout
timer, 71
security 802.1X authentication configuration, 75
security 802.1X authentication initiation, 62
security 802.1X configuration, 68 , 68
security SSL client policy configuration, 199
command
security AAA command accounting method, 12
security AAA command authorization method, 12
communication
security peer public key entry, 120
comparing
security 802.1X EAP relay/termination
authentication modes, 64
complexity checking (password control), 105
composition checking (password control), 104
conditional self-test, 235
configuring
port security, 86 , 89 , 95
port security client
macAddressElseUserLoginSecure, 99
port security client userLoginWithOUI, 96
port security feature, 92
port security intrusion protection feature, 92
port security MAC address autoLearn mode, 95
port security NTK feature, 92
port security secure MAC addresses, 93
security 802.1X, 68 , 68
security 802.1X authentication, 75
security 802.1X authentication trigger function, 72
security 802.1X online user handshake function, 72
security 802.1X quiet timer, 74
security AAA, 1 , 17
security AAA authentication methods for ISP
domain,
41
security AAA HWTACACS schemes, 30
security AAA HWTACACS server SSH user
AAA, 44
security AAA ISP domain accounting methods, 43
security AAA ISP domain authorization methods, 42
security AAA ISP domain methods, 39
security AAA ISP domain status, 40
security AAA LDAP administrator attributes, 38