HP 5120 SI Series

HP 5120 SI Series

395 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

375

Examples

# Set the DPD packet retransmission interval to 1 second for dpd2.

<Sysname> system-view

[Sysname] ike dpd dpd2

[Sysname-ike-dpd-dpd2] time-out 1

Table of Contents

Command Reference1
Table of Contents3
AAA Configuration Commands12
- General AAA Configuration Commands12
- Local User Configuration Commands37
- RADIUS Configuration Commands49
- HWTACACS Configuration Commands81
802.1X Configuration Commands102
- Display Dot1X102
- Dot1X105
- Dot1X Authentication-Method106
- Dot1X Auth-Fail Vlan107
- Dot1X Critical Vlan108
- Dot1X Critical Recovery-Action109
- Dot1X Domain-Delimiter110
- Dot1X Guest-Vlan111
- Dot1X Handshake112
- Dot1X Handshake Secure113
- Dot1X Mandatory-Domain113
- Dot1X Max-User114
- Dot1X Multicast-Trigger116
- Dot1X Port-Control116
- Dot1X Port-Method117
- Dot1X Quiet-Period118
- Dot1X Re-Authenticate119
- Dot1X Retry120
- Dot1X Timer121
- Dot1X Unicast-Trigger122
- Reset Dot1X Statistics123
EAD Fast Deployment Configuration Commands124
- Dot1X Free-Ip124
- Dot1X Timer Ead-Timeout124
- Dot1X Url125
MAC Authentication Configuration Commands127
- Display Mac-Authentication127
- Mac-Authentication129
- Mac-Authentication Critical Vlan130
- Mac-Authentication Domain131
- Mac-Authentication Guest-Vlan132
- Mac-Authentication Max-User133
- Mac-Authentication Timer133
- Mac-Authentication User-Name-Format134
- Reset Mac-Authentication Statistics135
Portal Configuration Commands137
- Display Portal Acl137
- Display Portal Connection Statistics140
- Display Portal Free-Rule143
- Display Portal Interface145
- Display Portal Local-Server146
- Display Portal Server147
- Display Portal Server Statistics148
- Display Portal Tcp-Cheat Statistics150
- Display Portal User152
- Portal Auth-Fail Vlan153
- Portal Auth-Network154
- Portal Delete-User155
- Portal Domain155
- Portal Free-Rule156
- Portal Local-Server157
- Portal Local-Server Enable158
- Portal Local-Server Ip159
- Portal Max-User160
- Portal Move-Mode Auto160
- Portal Nas-ID-Profile161
- Portal Nas-Ip162
- Portal Nas-Port-Type162
- Portal Offline-Detect Interval163
- Portal Redirect-Url164
- Portal Server165
- Portal Server Banner166
- Portal Server Method166
- Portal Server Server-Detect167
- Portal Server User-Sync169
- Portal Web-Proxy Port170
- Reset Portal Connection Statistics171
- Reset Portal Server Statistics172
- Reset Portal Tcp-Cheat Statistics172
Port Security Configuration Commands173
- Display Port-Security173
- Display Port-Security Mac-Address Block175
- Display Port-Security Mac-Address Security177
- Port-Security Authorization Ignore179
- Port-Security Enable180
- Port-Security Intrusion-Mode180
- Port-Security Mac-Address Security181
- Port-Security Max-Mac-Count182
- Port-Security Ntk-Mode183
- Port-Security Oui184
- Port-Security Port-Mode184
- Port-Security Timer Disableport187
- Port-Security Trap187
User Profile Configuration Commands189
- Display User-Profile189
- User-Profile Enable190
- User-Profile190
Password Control Configuration Commands192
- Display Password-Control192
- Display Password-Control Blacklist193
- Password194
- Password-Control Aging195
- Password-Control Alert-Before-Expire196
- Password-Control Authentication-Timeout197
- Password-Control Complexity197
- Password-Control Composition198
- Password-Control { Aging | Composition | History | Length } Enable199
- Password-Control Enable200
- Password-Control Expired-User-Login201
- Password-Control History201
- Password-Control Length202
- Password-Control Login Idle-Time203
- Password-Control Login-Attempt203
- Password-Control Password Update Interval205
- Password-Control Super Aging205
- Password-Control Super Composition206
- Password-Control Super Length207
- Reset Password-Control Blacklist207
- Reset Password-Control History-Record208
HABP Configuration Commands209
- Display Habp209
- Display Habp Table210
- Display Habp Traffic210
- Habp Client Vlan211
- Habp Enable212
- Habp Server Vlan212
- Habp Timer213
Public Key Configuration Commands214
- Display Public-Key Local Public214
- Display Public-Key Peer216
- Peer-Public-Key End217
- Public-Key-Code Begin217
- Public-Key-Code End218
- Public-Key Local Create219
- Public-Key Local Destroy220
- Public-Key Local Export Dsa220
- Public-Key Local Export Rsa222
- Public-Key Peer223
- Public-Key Peer Import Sshkey223
PKI Configuration Commands225
- Attribute225
- Ca Identifier226
- Certificate Request Entity226
- Certificate Request from227
- Certificate Request Mode228
- Certificate Request Polling228
- Certificate Request Url229
- Common-Name230
- Country230
- Crl Check231
- Crl Update-Period231
- Crl Url232
- Display Pki Certificate233
- Display Pki Certificate Access-Control-Policy234
- Display Pki Certificate Attribute-Group235
- Display Pki Crl Domain236
- Fqdn238
- Ip (PKI Entity View)238
- Ldap-Server239
- Locality240
- Organization240
- Organization-Unit241
- Pki Certificate Access-Control-Policy241
- Pki Certificate Attribute-Group242
- Pki Delete-Certificate242
- Pki Domain243
- Pki Entity243
- Pki Import-Certificate244
- Pki Request-Certificate Domain245
- Pki Retrieval-Certificate246
- Pki Retrieval-Crl Domain246
- Pki Validate-Certificate247
- Root-Certificate Fingerprint247
- Rule (PKI CERT ACP View)248
- State249
SSH2.0 Configuration Commands250
- SSH2.0 Server Configuration Commands250
- SSH2.0 Client Configuration Commands257
SFTP Configuration Commands265
- SFTP Server Configuration Commands265
  - Sftp Server Enable265
  - Sftp Server Idle-Timeout265
- SFTP Client Configuration Commands266
SCP Configuration Commands280
- SCP Client Configuration Commands280
  - Scp280
SSL Configuration Commands282
- Ciphersuite282
- Client-Verify Enable283
- Close-Mode Wait283
- Display Ssl Client-Policy284
- Display Ssl Server-Policy285
- Handshake Timeout286
- Pki-Domain287
- Prefer-Cipher288
- Server-Verify Enable288
- Session289
- Ssl Client-Policy290
- Ssl Server-Policy290
- Version291
TCP Attack Protection Configuration Commands293
- Display Tcp Status293
- Tcp Anti-Naptha Enable294
- Tcp State294
- Tcp Syn-Cookie Enable295
- Tcp Timer Check-State296
IP Source Guard Configuration Commands297
- Display Ip Check Source297
- Display User-Bind298
- Ip Check Source300
- Ip Check Source Ipv6300
- Ip Check Source Max-Entries301
- User-Bind302
- User-Bind Ipv6303
ARP Attack Protection Configuration Commands304
- ARP Packet Rate Limit Configuration Commands304
  - Arp Rate-Limit304
- Source MAC Address Based ARP Attack Detection Configuration Commands304
- ARP Packet Source MAC Address Consistency Check Configuration Commands308
  - Arp Anti-Attack Valid-Check Enable308
- ARP Active Acknowledgement Configuration Commands308
  - Arp Anti-Attack Active-Ack Enable308
- ARP Detection Configuration Commands309
- ARP Gateway Protection Configuration Commands314
  - Arp Filter Source314
- ARP Filtering Configuration Commands314
  - Arp Filter Binding314
ND Attack Defense Configuration Commands316
- Source MAC Consistency Check Commands316
  - Ipv6 Nd Mac-Check Enable316
- ND Detection Configuration Commands316
SAVI Configuration Commands321
- Ipv6 Savi Dad-Delay321
- Ipv6 Savi Dad-Preparedelay321
- Ipv6 Savi Down-Delay322
- Ipv6 Savi Strict322
System-Guard Configuration Commands324
- Display System-Guard324
- System-Guard Aging Time325
- System-Guard Control325
- System-Guard Detect-Threshold326
- System-Guard Enable326
- System-Guard Rate-Limit327
FIPS Configuration Commands328
- Fips Mode Enable328
- Display Fips Status328
- Fips Self-Test329
Ipsec Configuration Commands330
- Ah Authentication-Algorithm330
- Connection-Name330
- Display Ipsec Policy331
- Display Ipsec Proposal334
- Display Ipsec Sa335
- Display Ipsec Session338
- Display Ipsec Statistics339
- Display Ipsec Tunnel341
- Encapsulation-Mode342
- Esp Authentication-Algorithm343
- Esp Encryption-Algorithm343
- Ike-Peer (Ipsec Policy View)344
- Ipsec Anti-Replay Check345
- Ipsec Anti-Replay Window345
- Ipsec Decrypt Check346
- Ipsec Policy (Interface View)346
- Ipsec Policy (System View)347
- Ipsec Proposal348
- Ipsec Sa Global-Duration349
- Ipsec Session Idle-Time349
- Pfs350
- Policy Enable351
- Proposal (Ipsec Policy View)351
- Qos Pre-Classify352
- Reset Ipsec Sa353
- Reset Ipsec Session354
- Reset Ipsec Statistics354
- Sa Authentication-Hex355
- Sa Duration356
- Sa Encryption-Hex357
- Sa Spi358
- Security Acl358
- Transform359
- Tunnel Local360
- Tunnel Remote361
IKE Configuration Commands362
- Authentication-Algorithm362
- Authentication-Method362
- Certificate Domain363
- Display Ike Dpd364
- Display Ike Peer365
- Display Ike Proposal366
- Display Ike Sa367
- Dpd370
- Encryption-Algorithm371
- Exchange-Mode372
- ID-Type372
- Ike Dpd373
- Ike Local-Name373
- Ike Next-Payload Check Disabled374
- Ike Peer (System View)375
- Ike Proposal375
- Ike Sa Keepalive-Timer Interval376
- Ike Sa Keepalive-Timer Timeout376
- Ike Sa Nat-Keepalive-Timer Interval377
- Interval-Time378
- Local-Address378
- Local-Name379
- Nat Traversal380
- Peer380
- Pre-Shared-Key381
- Proposal (IKE Peer View)381
- Remote-Address382
- Remote-Name383
- Reset Ike Sa384
- Sa Duration385
- Time-Out385
Support and Other Resources387
- Contacting HP387
  - Subscription Service387
- Related Information387
  - Documents387
  - Websites387
- Conventions388
Index390

Other manuals for HP 5120 SI Series

Security Configuration Guide385 pages

Specification33 pages

Related product manuals

Preview: HP 5120 EI Switch Series

HP 5120 EI Switch Series

Preview: HP 5120 series

Preview: HP 5120 EI Series

HP 5120 EI Series

Preview: HP A3100-8 v2 SI

HP A3100-8 v2 SI

Preview: HP A5500 SI Switch Series

HP A5500 SI Switch Series

Preview: HP 5130 EI series

HP 5130 EI series

Preview: HP 5130-24G-4SFP+ EI

HP 5130-24G-4SFP+ EI

Preview: HP 5130 EI Switch Series

HP 5130 EI Switch Series

HP HPE 5140 24G 4SFP+ EI

Preview: HP FlexNetwork 5130 HI series

HP FlexNetwork 5130 HI series

Preview: HP FlexNetwork 5140 EI Series

HP FlexNetwork 5140 EI Series

Preview: HP 5920