HP 5920 Series Configuration Guide

384
IPsec configuration (IKE-based/template), 232
IPsec IKE-based tunnel for IPv4 packets
configuration, 243
IP
sec negotiation mode, 222
IP
sec policy configuration (IKE-based), 230
IPs
ec SA, 222
IP
sec tunnel establishment, 224
ke
epalive function configuration, 258
ke
ychain configuration, 256
maint
aining, 261
NA
T keepalive function configuration, 259
negotiati
on, 250
negotiati
on failure (no proposal or keychain
referenced correctly), 265
negotiati
on failure troubleshooting (no proposal
match), 264
PFS
, 252
pro
file configuration, 253
propo
sal configuration, 255
protoc
ols and standards, 252
SA
max number set, 260
secu
rity mechanism, 251
SNMP n
otification, 261
troubles
hooting, 264
IMC
s
ecurity AAA RADIUS session-control
feature, 46
im
plementing
security 802.1X HP MAC-based access
control, 70
secu
rity 802.1X HP port-based access
control, 70
se
curity AAA for MPLS L3VPNs, 13
se
curity AAA HWTACACS, 7
se
curity AAA LDAP, 9
se
curity AAA on device, 11
se
curity AAA RADIUS, 2
secu
rity ACL-based IPsec, 224, 225
secu
rity application-based IPsec, 224
secu
rity IPsec, 223
impo
rting
security peer host public key from file, 180
sec
urity PKI certificate import/export, 209
secu
rity public key from file, 182
trouble
shooting PKI CA certificate import
failure, 217
tro
ubleshooting PKI local certificate import
failure, 217
initi
a
ting
security 802.1X authentication, 65, 66
int
erface
enabling portal authentication, 95
ref
erencing portal Web server, 96
Int
ernet
security SSL configuration, 309, 310
Int
ernet Key Exchange. See IKE
intr
usion protection
blockmac mode, 151
disablepor
t mode, 151
disablepor
t-temporarily mode, 151
port
security feature, 14 5
IP
sec
urity. Use IPsec
se
curity ARP unresolvable IP attack
protection, 326, 328
se
curity ARP unresolvable IP attack protection
(blackhole routing), 327
se
curity ARP unresolvable IP attack protection
(source suppression), 327
se
curity ARP unresolvable IP attack protection
display, 328
se
curity uRPF configuration, 353, 356, 357
IP
addressing
security AAA HWTACACS outgoing packet source
IP address, 36
secu
rity AAA LDAP server IP address
configuration, 39
se
curity AAA RADIUS outgoing packet source IP
address, 28
secu
rity AAA RADIUS security policy server IP
address configuration, 30
secu
rity ARP attack protection configuration, 326
secu
rity ARP filtering configuration, 343
secu
rity ARP gateway protection, 342
se
curity ARP user/packet validity check, 339
secu
rity authorized ARP (DHCP relay agent), 334
secu
rity authorized ARP (DHCP server), 333
secu
rity MFF server IP address specification, 348
SSH pac
ket source IP address, 279
SSH SFT
P packet source IP address, 281
IP
source guard
configuration, 314 , 316 , 320

HP 5920 Series Specifications

General

Brand	HP
Model	5920 Series
Category	Switch
Language	English