HP StoreFabric SN6500B - Page 648

648 Fabric OS Administrator’s Guide
53-1002745-02
policy rules, 219
policy rules using service names
, 220
saving policy
, 218
supported actions
, 221
supported protocols
, 221
supported services and port numbers
, 220
IP interface for chassis management
, 65
IP sec
algorithms
, 234
Authentication Header protocol
, 233
configuration on the management interface
, 231
Encapsulating Security Payload protocol
, 233
flushing security associations
, 240
IKE policies
, 235
key management
, 235
manual key entry
, 236
null encryption support for IKE policies
, 240
policies
, 234–240
policy described
, 234
pre-shared key
, 235
protocol, described
, 177
protocols
, 233
sa-proposal
, 234
security association
, 233
security certificate
, 236
traffic selector
, 235
transform set
, 235
tunnel configurations
, 231–233
IP secConfig command
, 231, 236, 238, 239
ipAddrSet command
, 65, 66, 67, 223, 298
ipAddrShow command
, 63, 67
ipFilter command
, 190, 191, 218, 219, 223, 224, 623
IP-NAT
, 113
IPSECCA.pem, certificate name
, 236
ipSecConfig command
, 234, 624
IPv4 filter policy address
, 220
IPv6
autoconfiguration
, 68
DHCP and stateful IPv6 addresses
, 66
filter policy address
, 220
IPv6 policies tunneling IMCP traffic
, 240
ISL
, 78
best practices
, 114
configuring extended
, 553
fabric parameters
, 114
logical fabrics and
, 282
maximum distances in LO mode
, 78
ISL R_RDY mode
, 117
ISL trunking
disabling
, 538
enabling
, 538
over long distance fabrics
, 540
islShow command
, 400, 524, 538
J
Java
installing root certificate in plugin
, 187
installing root certificate to plugin
, 187
support for SSL
, 182
supported version
, 183
Java plugin, installing root certificate for
, 187
joining a switch to a fabric
, 229
K
key
adding public key to switch
, 180
deleting private from switch
, 182
deleting public from switch
, 182
generating for FCAP
, 215
generation
, 183
key management and IP sec
, 235
key pair generation for RSA or DSA
, 180
manual key entry and IP sec
, 236
PKI key pair generation on switch
, 181
pre-shared, and IP sec
, 235
private key generation
, 183
secret pairs for DH-CHAP
, 213
setting a secret key pair
, 214
viewing list of secret key pairs
, 213
key entry limitations, for encryption
, 395
key generation
, 398
keys, expiry
, 396
keyTool command
, 187
killTelnet command
, 57
L
L_Port, described, 84
latency bottleneck type
, 376
Layer 2 routing. See also: FSPF.
LDAP
Active Directory LDAP versions supported
, 163
authentication, non-FIPS mode
, 166
certificates for FIPS mode
, 620
configuring for Microsoft Active Directory
, 163
creating Fabric OS user accounts
, 153
deleting certificates
, 621
exporting certificates
, 621