HP FlexFabric 5700 series - Page 432

420
IP source guard
IPv4. See
IPv6. See
IP source guard (IPSG)
configuration, 346, 348, 351
displa
y, 350
d
ynamic binding, 347
main
tain, 350
stati
c binding, 347
IP
oE
security user profile configuration, 395
IP
sec
ACL configuration, 256
A
CL de-encapsulated packet check, 264
AC
L IPsec anti-replay, 265
AC
L rule keywords, 256
A
CL-based implementation, 255
A
CL-based IPsec, 253
anti-r
eplay redundancy, 266
a
pplication-based IPsec, 254
a
uthentication, 253
a
uthentication algorithms, 253
c
onfiguration, 250, 272
displa
y, 271
enc
apsulation modes, 251
enc
ryption, 253
enc
ryption algorithms, 253
FI
PS compliance, 254
I
KE configuration, 281, 283, 292
I
KE configuration (main mode/pre-shared key
authentication), 292
IK
E DPD, 290
I
KE global identity information, 288
I
KE identity authentication, 282
IK
E invalid SPI recovery, 291
I
KE keepalive function, 289
IK
E keychain, 287
IKE N
AT keepalive function, 289
IK
E negotiation, 281
I
KE negotiation mode, 252
I
KE profile configuration, 284
I
KE proposal, 286
I
KE SA max number, 291
IK
E security mechanism, 282
I
KE SNMP notification, 291
i
mplementation, 253
IP
v6. See
maintain, 271
mir
ror image ACLs, 256
non
-mirror image ACLs, 256
pac
ket DF bit, 268
pac
ket logging enable, 268
PK
I configuration, 216, 218, 230
poli
cy application to interface, 264
poli
cy configuration (IKE-based), 260
poli
cy configuration (IKE-based/direct), 261
poli
cy configuration (IKE-based/template), 262
poli
cy configuration (manual), 258
poli
cy configuration restrictions, 258
poli
cy configuration restrictions (IKE-based), 260
pr
otocols and standards, 254
Q
oS pre-classify enable, 267
R
IPng configuration, 277
SA
, 252
sec
urity protocols, 251
S
NMP notification configuration, 270
so
urce interface policy bind, 266
tr
ansform set, 257
tr
oubleshoot IKE, 295
tr
oubleshoot IKE negotiation failure (no proposal
match), 295
tr
oubleshoot IKE negotiation failure (no proposal or
keychain referenced correctly), 296
tr
oubleshoot SA negotiation failure (invalid identity
info), 297
tr
oubleshoot SA negotiation failure (no transform set
match), 296
tunnel e
stablishment, 254
tunnel f
or IPv4 packets (IKE-based), 274
tu
nnel for IPv4 packets (manual), 272
IP
v4
IPsec tunnel for IPv4 packets (IKE-based), 274
I
Psec tunnel for IPv4 packets (manual), 272
so
urce guard. See
SSH SCP client device, 315
S
SH Secure Telnet server connection
establishment, 310
S
SH SFTP server connection establishment, 312
I
Pv4 source guard (IPv4SG)
configuration, 346, 348, 348, 351