HPE 704654-B21, Руководство по настройке безопасности

Страница: 514 / 540

501
MAC authentication multi-VLAN, 110
PKI offline, 231
PKI online, 231
port security, 189
port security authentication control, 185
port security autoLearn MAC learning
control,
186
port security MAC learning control, 185
port security MAC learning control
autoLearn,
185
port security MAC learning control secure, 185
port security macAddressWithRadius
authentication,
187
port security secure MAC learning control, 186
security portal authentication, 126
security portal authentication
(cross-subnet),
126
security portal authentication (direct), 126
security portal authentication (re-DHCP), 126
uRPF loose check, 430
uRPF strict check, 430
userLogin 802.1X authentication, 187
userLoginSecure 802.1X authentication, 187
userLoginSecureExt 802.1X
authentication,
187
userLoginWithOUI 802.1X authentication, 187
MPLS L3VPN
AAA implementation, 13
PKI support, 227
security portal authentication (cross-subnet
for MPLS L3VPN),
177
multicast
802.1X multicast trigger mode, 67 , 84
N
NAS
AAA configuration, 17
AAA device implementation, 11
AAA HWTACACS implementation, 6
AAA LDAP implementation, 9
AAA MPLS L3VPN implementation, 13
AAA NAS-ID profile configuration, 49
AAA RADIUS implementation, 2
AAA RADIUS security policy server IP
address,
31
applying interface NAS-ID profile
(RADIUS),
141
NAT
IPsec IKE keepalive, 296
IPsec IKEv2 keepalive, 314
ND attack defense
configuration, 469
configuring source MAC consistency check, 469
IPv6. See IPv6 ND attack defense
need to know. Use NTK
negotiating
IPsec IKE negotiation, 288
IPsec IKE negotiation mode, 260
IPsec IKEv2 negotiation, 306
NETCONF
Secure Telnet client user line configuration, 330
SSH client user line configuration, 330
SSH+password authentication configuration, 382
network
802.1X access control method, 82
802.1X architecture, 64
802.1X authentication request attempts max
number,
82
802.1X authentication server timeout timer, 83
802.1X authentication trigger, 84
802.1X Auth-Fail VLAN, 88
802.1X authorization state, 81
802.1X critical VLAN, 89
802.1X critical voice VLAN, 90
802.1X EAD assistant, 92
802.1X EAP relay authentication, 69
802.1X EAP relay enable, 81
802.1X EAP termination enable, 81
802.1X guest VLAN, 86
802.1X guest VLAN assignment delay, 87
802.1X online user handshake, 83
802.1X periodic online user reauthentication, 86
802.1X port users max number, 82
AAA device implementation, 11
AAA HWTACACS implementation, 6
AAA HWTACACS scheme, 33
AAA HWTACACS server SSH user, 50
AAA ISP domain accounting method, 46
AAA ISP domain attribute, 43
AAA ISP domain authentication method, 44
AAA ISP domain authorization method, 45
AAA ISP domain creation, 43
AAA ISP domain method, 43
AAA LDAP implementation, 9
AAA LDAP scheme, 40
AAA LDAP server SSH user authentication, 56
AAA local user, 18
AAA MPLS L3VPN implementation, 13
AAA NAS-ID profile configuration, 49
AAA network access user, 18
AAA RADIUS implementation, 2
AAA RADIUS scheme, 22