HPE 704654-B21, Руководство по настройке безопасности

Страница: 497 / 540

484
defense policy creation, 456
detection exemption configuration, 462
flood attack, 454
log aggregation disable, 463
login delay, 463
login dictionary attack, 455
policy application (device), 462
scanning attack, 453
single-packet attack, 452
TCP fragment attack, 455
TCP fragment attack prevention
configuration,
463
attack detection and prevention. See attack D&P
attack defense policy configuration, 456
attack type, 452
displaying, 464
maintaining, 464
attack detection and prevention configuration
configuration, 455
attack type
security attack detection and prevention, 452
attacking
detection and prevention. See attack D&P
attribute
802.1X RADIUS EAP-Message, 66
802.1X RADIUS Message-Authentication, 67
AAA HWTACACS scheme, 33
AAA ISP domain attribute, 43
AAA LDAP administrator attribute, 41
AAA LDAP scheme, 40
AAA LDAP user attribute, 41
AAA local user, 18
AAA local user attribute, 19
AAA RADIUS, 14
AAA RADIUS common standard attributes, 14
AAA RADIUS extended attributes, 6
AAA RADIUS HPE proprietary attributes, 6 , 15
AAA RADIUS Login-Service attribute check
method,
32
AAA RADIUS scheme, 22
AAA scheme, 18
AAA user group attribute, 21
authenticating
802.1X access device initiated
authentication,
67
802.1X authentication, 68
802.1X authentication request attempts max
number,
82
802.1X authentication trigger, 84
802.1X client-initiated, 67
802.1X EAP over RADIUS, 66
802.1X EAP relay authentication, 69
802.1X EAP relay enable, 81
802.1X EAP relay/termination, 68
802.1X EAP termination, 70
802.1X EAP termination enable, 81
802.1X initiation, 67
802.1X mandatory port authentication domain, 85
802.1X overview, 64
802.1X periodic online user reauthentication, 86
802.1X RADIUS Message-Authentication
attribute,
67
802.1X timeout timers, 83
802.1X VLAN manipulation, 72
AAA configuration, 1 , 17 , 50
AAA ISP domain authentication method, 44
AAA LDAP authentication, 9
AAA LDAP server SSH user authentication, 56
AAA RADIUS server SSH user
authentauthorization,
53
AAA RADIUS user authentication methods, 2
AAA SSH user local authentHWTACACS
authorRADIUS accounting,
51
IPsec, 260
IPsec authentication algorithms, 260
IPsec Authentication Header. Use AH
IPsec configuration, 258 , 279
IPsec Encapsulating Security Payload. Use ESP
IPsec IKE configuration (main mode+pre-shared
key authentication),
299
IPsec IKE DSA signature authentication, 289
IPsec IKE pre-shared key authentication, 289
IPsec IKE RSA signature authentication, 289
IPsec IKEv2+pre-shared key authentication, 315
IPsec IKEv2+RSA signature authentication, 318
IPsec RIPng configuration, 284
IPsec tunnel for IPv4 packets (IKE-based), 281
IPsec tunnel for IPv4 packets (manual), 279
MAC authentication, 103 , 106 , 115
MAC authentication (local), 115
MAC authentication (RADIUS-based), 117
MAC authentication VLAN assignment, 103
periodic MAC reauthentication, 106
port security authentication modes, 185
port security client
macAddressElseUserLoginSecure,
200
port security client userLoginWithOUI, 197
port security configuration, 185 , 188 , 195
port security MAC address autoLearn, 195
security password control, 208 , 212
security password control configuration, 205