HP FlexFabric 5700 series, Руководство по настройке безопасности

Страница: 425 / 460

413
port security intrusion protection, 179
port security MAC address autoLearn, 184
port security NTK feature, 179
port security secure MAC addresses, 180
public peer key, 210
QoS or CAR parameters, 396
Secure Telnet client user line, 305
security password control, 194 , 197 , 202
security portal authentication, 118 , 123 , 137
security portal authentication cross-subnet, 149
security portal authentication destination
subnet, 128
security portal authentication detection
features, 130
security portal authentication direct, 137
security portal authentication extended
cross-subnet, 159
security portal authentication extended
direct, 152
security portal authentication extended
re-DHCP, 155
security portal authentication fail-permit, 134
security portal authentication portal-free
rule, 126
security portal authentication re-DHCP, 145
security portal authentication server, 124
security portal authentication server BAS-IP, 134
security portal authentication server
detection, 131
security portal authentication server
deuser synchronization,
162
security portal authentication source subnet, 127
security portal authentication user online
detection, 130
security portal authentication user
synchronization, 133
security portal authentication Web server, 125
security portal authentication Web server
detection, 132
security user profile, 395
source MAC consistency check, 402
SSH, 300
SSH client host public key, 306
SSH device as Secure Telnet client, 310
SSH device as server, 303
SSH device as SFTP client, 312
SSH management parameters, 308
SSH SCP client device, 315
SSH Secure Telnet, 317
SSH Secure Telnet client password
authentication, 325
SSH Secure Telnet client publickey
authentication, 329
SSH Secure Telnet server password
authentication, 317
SSH Secure Telnet server publickey
authentication,
320
SSH SFTP, 331
SSH SFTP client publickey authentication, 334
SSH SFTP server password authentication, 331
SSH user, 307
SSL, 342 , 343
SSL client policy, 344
SSL server policy, 343
TCP fragment attack prevention, 401
user profile, 396
user profile parameters, 396
consistency check (ARP attack protection), 363
controlling
802.1X controlled/uncontrolled port, 62
AAA RADIUS session-control, 46
port security MAC address learning, 175
security portal authentication user access, 126
copying
IPsec packet DF bit copy, 268
creating
AAA HWTACACS scheme, 32
AAA ISP domain, 42
AAA LDAP scheme, 41
AAA RADIUS scheme, 23
local key pair, 207
security LDAP server, 38
user profile, 395
critical VLAN
802.1X authentication, 76
802.1X configuration, 88
MAC authentication, 103
MAC authentication configuration, 109
CRL
PKI, 217
PKI architecture, 217