H3C S5830V2 series, Руководство по настройке безопасности, Страница: 315 / 332

301
security AAA SSH user local
authentHWTACACS
authorRADIUS accounting,
46
security ARP attack protection
configuration, 212
security FIPS configuration, 232 , 236
security FIPS mode entry (automatic
reboot), 236
security FIPS mode entry (manual reboot), 237
security IP source guard
configuration, 202 , 203 , 206
security IPsec configuration, 240 , 258
security IPsec IKE configuration, 264 , 266
security IPsec IKE configuration (main
mode/pre-shared key authentication), 275
security IPsec IKE-based tunnel for IPv4 packets
configuration, 261
security IPsec tunnel for IPv4 packets
configuration, 258
security IPv4 source guard dynamic
configuration with DHCP relay,
210
security IPv4 source guard dynamic
configuration with DHCP snooping, 208
security IPv6 source guard static
configuration, 211
security MAC authentication
configuration, 78 , 79 , 82
security MAC local authentication
configuration, 82
security MAC RADIUS-based authentication
configuration,
84
security password control
configuration, 104 , 107 , 111
security peer public key entry, 120
security PKI configuration, 125 , 128 , 139
security public key import from file, 122
security public key management, 115 , 120
security SSH configuration, 160
security SSH SCP file transfer with password
authentication, 194
security SSH SFTP client publickey
authentication, 191
security SSH SFTP configuration, 189
security SSH SFTP server password
authentication, 189
security SSH Stelnet client password
authentication, 184
security SSH Stelnet client publickey
authentication, 187
security SSH Stelnet configuration, 176
security SSH Stelnet server password
authentication, 176
security SSH Stelnet server publickey
authentication,
179
security SSL configuration, 197 , 198
security SSL services, 197
security uRPF configuration, 227 , 231
no
security AAA no accounting method, 12
security AAA no authentication, 12
security AAA no authorization, 12
NTK
ntkonly mode, 92
ntk-withbroadcasts mode, 92
ntk-withmulticasts mode, 92
port security feature, 86
numbering
security IPsec IKE SA max number set, 274
O
obtaining
security PKI certificate, 134
offline
security MAC authentication offline detect timer, 81
offline mode (PKI), 131
online mode (PKI), 131
OpenCA
security PKI CA server certificate request, 146
P
packet
security 802.1X EAP format, 61
security 802.1X EAPOL format, 61
security 802.1X format, 61
security AAA HWTACACS outgoing packet source
IP address, 34
security AAA HWTACACS packet exchange
process,
7
security AAA LDAP packet exchange process, 10
security AAA RADIUS outgoing packet source IP
address, 27
security AAA RADIUS packet exchange process, 3
security AAA RADIUS packet format, 4