HP FlexFabric 5700 series User Manual

419
configuration, 281, 283, 292
configuration (main mode/pre-shared key
authentication), 292
DH
algorithm, 283
displa
y, 292
DP
D configuration, 290
FI
PS compliance, 283
global i
dentity information, 288
i
dentity authentication, 282
in
valid SPI recovery, 291
I
Psec negotiation mode, 252
IP
sec policy (IKE-based), 260
IP
sec policy (IKE-based/direct), 261
I
Psec policy (IKE-based/template), 262
IP
sec SA, 252
I
Psec tunnel establishment, 254
IP
sec tunnel for IPv4 packets (IKE-based), 274
k
eepalive function, 289
k
eychain configuration, 287
main
tain, 292
N
AT keepalive function, 289
negoti
ation, 281
PF
S, 283
pr
ofile configuration, 284
pr
oposal configuration, 286
pr
otocols and standards, 283
S
A max number set, 291
sec
urity mechanism, 282
S
NMP notification, 291
tr
oubleshoot negotiation failure (no proposal
match), 295
tr
oubleshoot negotiation failure (no proposal or
keychain referenced correctly), 296
tr
oubleshooting, 295
IM
C
AAA RADIUS session-control, 46
i
mplementing
802.1X MAC-based access control, 71
8
02.1X port-based access control, 71
AAA HW
TACACS, 7
AAA LD
AP, 9
AAA o
n device, 11
AAA R
ADIUS, 2
IP
sec, 253
sec
urity ACL-based IPsec, 253, 255
sec
urity application-based IPsec, 254
im
porting
peer host public key from file, 210
PK
I certificate import/export, 240
publi
c key from file, 213
tr
oubleshooting PKI CA certificate import
failure, 248
tr
oubleshooting PKI local certificate import
failure, 248
initi
ating
802.1X authentication, 65, 66
in
terface
security portal authentication Web server
reference, 126
In
ternet
SSL configuration, 342, 343
In
ternet Key Exchange. Use
intrusion protection
port security blockmac mode, 179
por
t security disableport mode, 179
por
t security disableport-temporarily mode, 179
por
t security feature, 173
IP
ARP attack protection (unresolvable IP
attack), 357, 359
AR
P attack protection blackhole routing
(unresolvable IP attack), 358
AR
P attack protection source suppression
(unresolvable IP attack), 358
ARP ip v
alidity check, 365
sec
urity. Use
IP addressing
AAA HWTACACS outgoing packet source IP
address, 36
AAA LD
AP server IP address, 39
AAA
RADIUS outgoing packet source IP
address, 28
AAA
RADIUS security policy server IP address, 30
AR
P attack protection configuration, 357
ARP f
iltering configuration, 373
A
RP gateway protection, 372
AR
P restricted forwarding, 368
AR
P user+packet validity check, 367
MFF se
rver IP address, 378
S
SH packet source IP address, 310
S
SH SFTP packet source IP address, 312

HP FlexFabric 5700 series Specifications

General

Layer Support	L2/L3
Routing Protocol	OSPF, BGP, RIP, IS-IS, Static Routing
Remote Management Protocol	SNMP, CLI, Web
Features	VXLAN
Compliant Standards	IEEE 802.1D, 802.1Q, 802.1w, 802.1s, 802.3ad
Operating Temperature	0°C to 45°C
Operating Humidity	10% to 90% (non-condensing)
VLANs	4K