HPE FlexFabric 5940 SERIES, Руководство по настройке безопасности

Страница: 565 / 571

552
setting
802.1X authentication attempts max number
for MAC authenticated users,
101
802.1X authentication request attempts
max,
90
802.1X authentication timeout timers, 90
802.1X concurrent port users max, 90
802.1X port authorization state, 89
802.1X quiet timer, 93
AAA concurrent login user max, 56
AAA HWTACACS timer, 41
AAA HWTACACS traffic statistics unit, 39
AAA HWTACACS username format, 39
AAA LDAP server timeout period, 43
AAA RADIUS Remanent_Volume attribute
data measurement unit,
35
AAA RADIUS request transmission attempts
max,
29
AAA RADIUS server status, 29
AAA RADIUS timer, 32
AAA RADIUS traffic statistics unit, 28
AAA RADIUS username format, 28
IPsec IKE SA max, 335
IPsec packet DF bit set, 315
IPsec tunnel max, 319
MAC authentication concurrent port users
max,
121
password, 239
password control parameters (global), 243
password control parameters (local user), 245
password control parameters (super), 246
password control parameters (user
group),
244
port security mode, 216
portal authentication users max, 150
SFTP
client configuration (publickey
authentication-enabled),
401
client device configuration, 371
client local key pair generation, 371
client local key pair generation
restrictions,
371
configuration, 398
configuration (192-bit Suite B), 404
directories, 374
files, 375
help information display, 375
packet source IP address, 372
server configuration (password
authentication-enabled),
398
server connection establishment, 372
server connection establishment based on Suite
B,
374
server connection termination, 375
server enable, 362
SSH application, 358
SSH management parameters, 366
shared key
AAA HWTACACS, 39
AAA RADIUS, 28
signature authentication (IKE), 327
single-packet attack
attack D&P defense policy, 429
attack D&P device-preventable attacks, 425
attack D&P log non-aggregation enable, 436
SNMP
AAA RADIUS notifications, 35
IPsec IKE SNMP notification, 336
IPsec SNMP notification, 318
port security enable, 222
software
crypto engine configuration, 491
source
ARP attack detection (source
MAC-based),
458 , 460
ARP attack detection src-mac validity check, 466
IPsec source interface policy bind, 314
portal authentication portal-free rule, 148
portal authentication subnet, 149
source MAC consistency check
configuration, 477
specifying
802.1X access control method, 89
802.1X mandatory port authentication domain, 92
802.1X supported domain name delimiters, 99
AAA HWTACACS accounting server, 38
AAA HWTACACS authentication server, 36
AAA HWTACACS authorization server, 37
AAA HWTACACS outgoing packet source IP
address,
40
AAA HWTACACS scheme VPN instance, 39
AAA HWTACACS shared keys, 39
AAA LDAP attribute map for authorization, 46
AAA LDAP authentication server, 46
AAA LDAP authorization server, 46
AAA LDAP version, 43
AAA RADIUS accounting server parameters, 27
AAA RADIUS authentication server, 26
AAA RADIUS outgoing packet source IP
address,
31
AAA RADIUS scheme VPN instance, 28
AAA RADIUS shared keys, 28