Home
HPE
Switch
FlexFabric 5940 SERIES
HPE FlexFabric 5940 SERIES User Manual
5
of 1
of 1 rating
571 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
388
Figure 106 Specifying the preferred SSH version
e.
Select
Connection
>
SSH
>
Auth
from the navigatio
n tree.
The window shown in
Figure 107
ap
pears.
f.
Click
Bro
w
se…
to bring up the file selection win
dow, navigate to the private key file
(
private.ppk
in this example), and click
OK
.
Figure 107 Specifying the private key
file
400
402
Table of Contents
Default Chapter
3
Table of Contents
3
Configuring AAA
14
Overview
14
Radius
15
Hwtacacs
19
Ldap
22
AAA Implementation on the Device
25
AAA for MPLS L3Vpns
27
Protocols and Standards
27
RADIUS Attributes
27
FIPS Compliance
32
AAA Configuration Considerations and Task List
32
Configuring AAA Schemes
33
Configuring Local Users
33
Configuring RADIUS Schemes
37
Configuring HWTACACS Schemes
49
Configuring LDAP Schemes
55
Configuring AAA Methods for ISP Domains
59
Configuration Prerequisites
60
Creating an ISP Domain
60
Configuring ISP Domain Attributes
61
Configuring Authentication Methods for an ISP Domain
62
Configuring Authorization Methods for an ISP Domain
63
Configuring Accounting Methods for an ISP Domain
64
Configuring the RADIUS Session-Control Feature
66
Configuring the RADIUS DAE Server Feature
66
Changing the DSCP Priority for RADIUS Packets
67
Configuring the RADIUS Attribute Translation Feature
67
Setting the Maximum Number of Concurrent Login Users
69
Configuring a NAS-ID Profile
69
Configuring the Device ID
70
Displaying and Maintaining AAA
70
AAA Configuration Examples
70
AAA for SSH Users by an HWTACACS Server
70
Local Authentication, HWTACACS Authorization, and RADIUS Accounting for SSH Users
72
Authentication and Authorization for SSH Users by a RADIUS Server
73
Authentication for SSH Users by an LDAP Server
77
Troubleshooting RADIUS
81
RADIUS Authentication Failure
81
RADIUS Packet Delivery Failure
81
RADIUS Accounting Error
82
Troubleshooting HWTACACS
82
Troubleshooting LDAP
82
LDAP Authentication Failure
82
802.1X Overview
84
802.1X Architecture
84
Controlled/Uncontrolled Port and Port Authorization Status
84
802.1X-Related Protocols
85
Packet Formats
85
EAP over RADIUS
86
802.1X Authentication Initiation
87
802.1X Client as the Initiator
87
Access Device as the Initiator
87
802.1X Authentication Procedures
88
Comparing EAP Relay and EAP Termination
88
EAP Relay
89
EAP Termination
90
Configuring 802.1X
92
Access Control Methods
92
802.1X VLAN Manipulation
92
Authorization VLAN
92
Guest VLAN
94
Auth-Fail VLAN
95
Critical VLAN
96
Critical Voice VLAN
98
Using 802.1X Authentication with Other Features
99
ACL Assignment
99
User Profile Assignment
99
EAD Assistant
99
Redirect URL Assignment
100
Configuration Prerequisites
100
802.1X Configuration Task List
100
Enabling 802.1X
101
Enabling EAP Relay or EAP Termination
101
Setting the Port Authorization State
102
Specifying an Access Control Method
102
Setting the Maximum Number of Concurrent 802.1X Users on a Port
103
Setting the Maximum Number of Authentication Request Attempts
103
Setting the 802.1X Authentication Timeout Timers
103
Configuring Online User Handshake
104
Configuration Guidelines
104
Configuration Procedure
104
Configuring the Authentication Trigger Feature
105
Configuration Guidelines
105
Configuration Procedure
105
Specifying a Mandatory Authentication Domain on a Port
105
Setting the Quiet Timer
106
Configuring 802.1X Reauthentication
106
Overview
106
Configuration Restrictions and Guidelines
107
Configuring 802.1X Periodic Reauthentication
107
Configuring 802.1X Manual Reauthentication
107
Enabling the Keep-Online Feature
108
Configuring an 802.1X Guest VLAN
108
Configuration Guidelines
108
Configuration Prerequisites
109
Configuration Procedure
109
Enabling 802.1X Guest VLAN Assignment Delay
109
Configuring an 802.1X Auth-Fail VLAN
110
Configuration Guidelines
110
Configuration Prerequisites
110
Configuration Procedure
111
Configuring an 802.1X Critical VLAN
111
Configuration Guidelines
111
Configuration Prerequisites
111
Enabling the 802.1X Critical Voice VLAN
112
Configuration Restrictions and Guidelines
112
Configuration Prerequisites
112
Configuration Procedure
112
Specifying Supported Domain Name Delimiters
112
Enabling 802.1X User IP Freezing
113
Sending 802.1X Protocol Packets out of a Port Without VLAN Tags
113
Setting the Maximum Number of 802.1X Authentication Attempts for MAC Authenticated Users
114
Configuring the EAD Assistant Feature
114
Displaying and Maintaining 802.1X
115
802.1X Authentication Configuration Examples
115
Basic 802.1X Authentication Configuration Example
115
Guest VLAN and Authorization VLAN Configuration Example
117
802.1X with ACL Assignment Configuration Example
120
With EAD Assistant Configuration Example (with DHCP Relay Agent)
121
With EAD Assistant Configuration Example (with DHCP Server)
124
Troubleshooting 802.1X
126
EAD Assistant URL Redirection Failure
126
Configuring MAC Authentication
128
Overview
128
User Account Policies
128
Authentication Methods
128
VLAN Assignment
129
ACL Assignment
131
User Profile Assignment
131
Redirect URL Assignment
132
Configuration Prerequisites
132
Configuration Task List
132
Enabling MAC Authentication
132
Specifying a MAC Authentication Domain
133
Configuring the User Account Format
133
Configuring MAC Authentication Timers
134
Setting the Maximum Number of Concurrent MAC Authentication Users on a Port
134
Enabling MAC Authentication Multi-VLAN Mode on a Port
135
Configuring MAC Authentication Delay
135
Enabling Parallel Processing of MAC Authentication and 802.1X Authentication
136
Configuration Restrictions and Guidelines
136
Configuration Procedure
136
Configuring a MAC Authentication Guest VLAN
137
Configuring a MAC Authentication Critical VLAN
138
Enabling the MAC Authentication Critical Voice VLAN
138
Configuration Prerequisites
138
Configuration Procedure
139
Configuring Periodic MAC Reauthentication
139
Overview
139
Configuration Restrictions and Guidelines
139
Configuration Procedure
140
Enabling MAC Authentication Offline Detection
140
Displaying and Maintaining MAC Authentication
141
MAC Authentication Configuration Examples
141
Local MAC Authentication Configuration Example
141
RADIUS-Based MAC Authentication Configuration Example
143
ACL Assignment Configuration Example
145
Configuring Portal Authentication
149
Overview
149
Extended Portal Functions
149
Portal System Components
149
Portal System Using the Local Portal Web Server
151
Interaction between Portal System Components
151
Portal Authentication Modes
152
Portal Support for EAP
152
Portal Authentication Process
153
Portal Packet Filtering Rules
155
MAC-Based Quick Portal Authentication
155
Portal Configuration Task List
156
Configuration Prerequisites
157
Configuring a Portal Authentication Server
157
Configuring a Portal Web Server
158
Enabling Portal Authentication
159
Configuration Restrictions and Guidelines
159
Configuration Procedure
160
Specifying a Portal Web Server
160
Controlling Portal User Access
161
Configuring a Portal-Free Rule
161
Configuring an Authentication Source Subnet
162
Configuring an Authentication Destination Subnet
163
Setting the Maximum Number of Portal Users
163
Specifying a Portal Authentication Domain
164
Specifying a Preauthentication Domain
165
Specifying a Preauthentication IP Address Pool for Portal Users
165
Enabling Strict-Checking on Portal Authorization Information
166
Enabling Portal Authentication Only for DHCP Users
167
Enabling Outgoing Packets Filtering on a Portal-Enabled Interface
167
Configuring Portal Detection Features
167
Configuring Online Detection of Portal Users
167
Configuring Portal Authentication Server Detection
168
Configuring Portal Web Server Detection
169
Configuring Portal User Synchronization
170
Configuring the Portal Fail-Permit Feature
171
Configuring BAS-IP for Portal Packets Sent to the Portal Authentication Server
171
Enabling Portal Roaming
172
Specifying a Format for the NAS-Port-ID Attribute
173
Specifying the Device ID
173
Logging out Online Portal Users
173
Configuring Web Redirect
174
Applying a NAS-ID Profile to an Interface
174
Configuring the Local Portal Web Server Feature
175
Customizing Authentication Pages
175
Configuring a Local Portal Web Server
177
Enabling ARP or ND Entry Conversion for Portal Clients
178
Configuring MAC-Based Quick Portal Authentication
178
Configuring a MAC Binding Server
178
Specifying a MAC Binding Server on an Interface
179
Enabling Logging for User Logins and Logouts
180
Displaying and Maintaining Portal
180
Portal Configuration Examples
181
Configuring Direct Portal Authentication
181
Configuring Re-DHCP Portal Authentication
189
Configuring Cross-Subnet Portal Authentication
192
Configuring Extended Direct Portal Authentication
196
Configuring Extended Re-DHCP Portal Authentication
199
Configuring Extended Cross-Subnet Portal Authentication
203
Configuring Portal Server Detection and Portal User Synchronization
206
Configuring Direct Portal Authentication with a Preauthentication Domain
214
Configuring Re-DHCP Portal Authentication with a Preauthentication Domain
216
Configuring Direct Portal Authentication Using Local Portal Web Server
218
Troubleshooting Portal
221
No Portal Authentication Page Is Pushed for Users
221
Cannot Log out Portal Users on the Access Device
222
Cannot Log out Portal Users on the RADIUS Server
222
Users Logged out by the Access Device Still Exist on the Portal Authentication Server
222
Re-DHCP Portal Authenticated Users Cannot Log in Successfully
223
Configuring Port Security
224
Overview
224
Port Security Features
224
Port Security Modes
224
Configuration Task List
227
Enabling Port Security
227
Setting Port Security's Limit on the Number of Secure MAC Addresses on a Port
228
Setting the Port Security Mode
229
Configuring Port Security Features
230
Configuring NTK
230
Configuring Intrusion Protection
231
Configuring Secure MAC Addresses
231
Configuration Prerequisites
232
Configuration Procedure
232
Ignoring Authorization Information from the Server
233
Enabling MAC Move
233
Enabling the Authorization-Fail-Offline Feature
234
Applying a NAS-ID Profile to Port Security
234
Enabling SNMP Notifications for Port Security
235
Displaying and Maintaining Port Security
235
Port Security Configuration Examples
235
Autolearn Configuration Example
235
Userloginwithoui Configuration Example
238
Configure Port Security
239
Macaddresselseuserloginsecure Configuration Example
240
Troubleshooting Port Security
244
Cannot Set the Port Security Mode
244
Cannot Configure Secure MAC Addresses
244
Configuring User Profiles
246
Overview
246
User Profile Configuration Task List
246
Configuration Restrictions and Guidelines
246
Configuring a User Profile
246
Displaying and Maintaining User Profiles
247
User Profile Configuration Example
247
Network Requirements
247
Configuration Procedure
247
Verifying the Configuration
250
Configuring Password Control
252
Overview
252
Password Setting
252
Password Updating and Expiration
253
User Login Control
254
Password Not Displayed in any Form
255
Logging
255
FIPS Compliance
255
Password Control Configuration Task List
255
Enabling Password Control
256
Setting Global Password Control Parameters
256
Setting User Group Password Control Parameters
257
Setting Local User Password Control Parameters
258
Setting Super Password Control Parameters
259
Displaying and Maintaining Password Control
259
Password Control Configuration Example
260
Network Requirements
260
Configuration Procedure
260
Verifying the Configuration
262
Configuring Keychains
263
Overview
263
Configuration Procedure
263
Displaying and Maintaining Keychain
264
Keychain Configuration Example
264
Network Requirements
264
Configuration Procedure
264
Configuring Switch B
265
Configure Ospf
265
Verifying the Configuration
266
Managing Public Keys
269
Overview
269
FIPS Compliance
269
Creating a Local Key Pair
269
Distributing a Local Host Public Key
271
Exporting a Host Public Key
271
Displaying a Host Public Key
271
Destroying a Local Key Pair
272
Configuring a Peer Host Public Key
272
Importing a Peer Host Public Key from a Public Key File
272
Entering a Peer Host Public Key
273
Displaying and Maintaining Public Keys
273
Examples of Public Key Management
273
Example for Entering a Peer Host Public Key
273
Example for Importing a Public Key from a Public Key File
275
Configuring PKI
278
Overview
278
PKI Terminology
278
PKI Architecture
279
PKI Operation
279
PKI Applications
280
FIPS Compliance
280
PKI Configuration Task List
280
Configuring a PKI Entity
281
Configuring a PKI Domain
281
Requesting a Certificate
283
Configuration Guidelines
284
Configuring Automatic Certificate Request
284
Manually Requesting a Certificate
285
Aborting a Certificate Request
285
Obtaining Certificates
285
Configuration Prerequisites
286
Configuration Guidelines
286
Configuration Procedure
286
Verifying PKI Certificates
287
Verifying Certificates with CRL Checking
287
Verifying Certificates Without CRL Checking
288
Specifying the Storage Path for the Certificates and Crls
288
Exporting Certificates
289
Removing a Certificate
289
Configuring a Certificate-Based Access Control Policy
290
Displaying and Maintaining PKI
291
PKI Configuration Examples
291
Requesting a Certificate from an RSA Keon CA Server
291
Requesting a Certificate from a Windows Server 2003 CA Server
294
Requesting a Certificate from an Openca Server
297
Certificate-Based Access Control Policy Configuration Example
300
Certificate Import and Export Configuration Example
302
Troubleshooting PKI Configuration
307
Failed to Obtain the CA Certificate
307
Failed to Obtain Local Certificates
308
Failed to Request Local Certificates
308
Failed to Obtain Crls
309
Failed to Import the CA Certificate
310
Failed to Import a Local Certificate
310
Failed to Export Certificates
311
Failed to Set the Storage Path
311
Configuring Ipsec
312
Overview
312
Security Protocols and Encapsulation Modes
312
Security Association
314
Authentication and Encryption
314
Ipsec Implementation
315
Protocols and Standards
316
FIPS Compliance
316
Ipsec Tunnel Establishment
316
Implementing ACL-Based Ipsec
316
Configuring an ACL
317
Configuring an Ipsec Transform Set
318
Configuring a Manual Ipsec Policy
320
Configuring an IKE-Based Ipsec Policy
321
Applying an Ipsec Policy to an Interface
325
Enabling ACL Checking for De-Encapsulated Packets
325
Configuring Ipsec Anti-Replay
326
Configuring Ipsec Anti-Replay Redundancy
326
Binding a Source Interface to an Ipsec Policy
327
Enabling Qos Pre-Classify
328
Enabling Logging of Ipsec Packets
328
Configuring the DF Bit of Ipsec Packets
328
Configuring Ipsec for Ipv6 Routing Protocols
329
Configuration Task List
329
Configuring a Manual Ipsec Profile
330
Configuring SNMP Notifications for Ipsec
331
Configuring Ipsec Fragmentation
331
Setting the Maximum Number of Ipsec Tunnels
332
Displaying and Maintaining Ipsec
332
Ipsec Configuration Examples
333
Configuring a Manual Mode Ipsec Tunnel for Ipv4 Packets
333
Configuring Ipsec for Ripng
335
Configuring IKE
339
Overview
339
IKE Negotiation Process
339
IKE Security Mechanism
340
Protocols and Standards
341
FIPS Compliance
341
IKE Configuration Prerequisites
341
IKE Configuration Task List
341
Configuring an IKE Profile
342
Configuring an IKE Proposal
344
Configuring an IKE Keychain
345
Configuring the Global Identity Information
346
Configuring the IKE Keepalive Feature
346
Configuring the IKE NAT Keepalive Feature
347
Configuring IKE DPD
347
Enabling Invalid SPI Recovery
348
Setting the Maximum Number of IKE Sas
348
Configuring SNMP Notifications for IKE
349
Displaying and Maintaining IKE
349
IKE Configuration Examples
350
Configuring an IKE-Based Ipsec Tunnel for Ipv4 Packets
350
Main Mode IKE with Pre-Shared Key Authentication Configuration Example
352
Troubleshooting IKE
355
IKE Negotiation Failed Because no Matching IKE Proposals Were Found
355
IKE Negotiation Failed Because no IKE Proposals or IKE Keychains Are Specified Correctly
356
Ipsec SA Negotiation Failed Because no Matching Ipsec Transform Sets Were Found
356
Ipsec SA Negotiation Failed Due to Invalid Identity Information
357
Configuring Ikev2
360
Overview
360
Ikev2 Negotiation Process
360
New Features in Ikev2
361
Protocols and Standards
361
Ikev2 Configuration Task List
361
Configuring an Ikev2 Profile
362
Configuring an Ikev2 Policy
365
Configuring an Ikev2 Proposal
365
Configuring an Ikev2 Keychain
367
Configure Global Ikev2 Parameters
368
Enabling the Cookie Challenging Feature
368
Configuring the Ikev2 DPD Feature
368
Configuring the Ikev2 NAT Keepalive Feature
368
Displaying and Maintaining Ikev2
369
Troubleshooting Ikev2
369
Ikev2 Negotiation Failed Because no Matching Ikev2 Proposals Were Found
369
Ipsec SA Negotiation Failed Because no Matching Ipsec Transform Sets Were Found
370
Ipsec Tunnel Establishment Failed
370
Configuring SSH
371
Overview
371
How SSH Works
371
SSH Authentication Methods
372
SSH Support for Suite B
373
FIPS Compliance
373
Configuring the Device as an SSH Server
374
SSH Server Configuration Task List
374
Generating Local Key Pairs
374
Enabling the Stelnet Server
375
Enabling the SFTP Server
375
Enabling the SCP Server
376
Enabling NETCONF over SSH
376
Configuring the User Lines for SSH Login
376
Configuring a Client's Host Public Key
377
Configuring an SSH User
378
Configuring the SSH Management Parameters
379
Specifying a PKI Domain for the SSH Server
380
Configuring the Device as an Stelnet Client
380
Stelnet Client Configuration Task List
380
Generating Local Key Pairs
381
Specifying the Source IP Address for SSH Packets
381
Establishing a Connection to an Stelnet Server
381
Establishing a Connection to an Stelnet Server Based on Suite B
383
Configuring the Device as an SFTP Client
384
SFTP Client Configuration Task List
384
Generating Local Key Pairs
384
Specifying the Source IP Address for SFTP Packets
385
Establishing a Connection to an SFTP Server
385
Establishing a Connection to an SFTP Server Based on Suite B
387
Working with SFTP Directories
387
Working with SFTP Files
388
Displaying Help Information
388
Terminating the Connection with the SFTP Server
388
Configuring the Device as an SCP Client
389
SCP Client Configuration Task List
389
Generating Local Key Pairs
389
Establishing a Connection to an SCP Server
389
Establishing a Connection to an SCP Server Based on Suite B
391
Specifying Algorithms for SSH2
392
Specifying Key Exchange Algorithms for SSH2
392
Specifying Public Key Algorithms for SSH2
392
Specifying Encryption Algorithms for SSH2
393
Specifying MAC Algorithms for SSH2
393
Displaying and Maintaining SSH
393
Stelnet Configuration Examples
394
Password Authentication Enabled Stelnet Server Configuration Example
394
Publickey Authentication Enabled Stelnet Server Configuration Example
396
Password Authentication Enabled Stelnet Client Configuration Example
402
Publickey Authentication Enabled Stelnet Client Configuration Example
405
Stelnet Configuration Example Based on 128-Bit Suite B Algorithms
407
SFTP Configuration Examples
411
Password Authentication Enabled SFTP Server Configuration Example
411
Ssh Connection
412
Publickey Authentication Enabled SFTP Client Configuration Example
414
SFTP Configuration Example Based on 192-Bit Suite B Algorithms
417
SCP Configuration Examples
421
SCP Configuration Example with Password Authentication
421
SCP Configuration Example Based on Suite B Algorithms
422
NETCONF over SSH Configuration Example with Password Authentication
429
Network Requirements
429
Verifying the Configuration
431
Configuring SSL
432
Overview
432
SSL Security Services
432
SSL Protocol Stack
432
FIPS Compliance
433
SSL Configuration Task List
433
Configuring an SSL Server Policy
433
Configuring an SSL Client Policy
435
Displaying and Maintaining SSL
437
Configuring Attack Detection and Prevention
438
Overview
438
Attacks that the Device Can Prevent
438
Single-Packet Attacks
438
Scanning Attacks
439
Flood Attacks
440
TCP Fragment Attack
441
Login Dictionary Attack
441
Attack Detection and Prevention Configuration Task List
441
Configuring an Attack Defense Policy
442
Creating an Attack Defense Policy
442
Configuring a Single-Packet Attack Defense Policy
442
Configuring a Scanning Attack Defense Policy
443
Configuring a Flood Attack Defense Policy
444
Configuring Attack Detection Exemption
448
Applying an Attack Defense Policy to the Device
448
Enabling Log Non-Aggregation for Single-Packet Attack Events
449
Configuring TCP Fragment Attack Prevention
449
Enabling the Login Delay
450
Displaying and Maintaining Attack Detection and Prevention
450
Attack Detection and Prevention Configuration Examples
451
Attack Defense Policy Device Application Configuration Example
451
Configuring TCP Attack Prevention
455
Overview
455
Configuring Naptha Attack Prevention
455
Configuring IP Source Guard
456
Overview
456
Static IPSG Bindings
456
Dynamic IPSG Bindings
457
IPSG Configuration Task List
457
Configuring the Ipv4Sg Feature
458
Enabling Ipv4Sg on an Interface
458
Configuring a Static Ipv4Sg Binding
458
Configuring the Ipv6Sg Feature
459
Enabling Ipv6Sg on an Interface
459
Configuring a Static Ipv6Sg Binding
460
Displaying and Maintaining IPSG
460
IPSG Configuration Examples
461
Static Ipv4Sg Configuration Example
461
Dynamic Ipv4Sg Using DHCP Snooping Configuration Example
462
Dynamic Ipv4Sg Using DHCP Relay Agent Configuration Example
463
Static Ipv6Sg Configuration Example
464
Dynamic Ipv6Sg Using Dhcpv6 Snooping Configuration Example
465
Dynamic Ipv6Sg Using Dhcpv6 Relay Agent Configuration Example
466
Configuring ARP Attack Protection
468
ARP Attack Protection Configuration Task List
468
Configuring Unresolvable IP Attack Protection
468
Configuring ARP Source Suppression
469
Configuring ARP Blackhole Routing
469
Displaying and Maintaining Unresolvable IP Attack Protection
469
Configuration Example
470
Configuring ARP Packet Rate Limit
470
Configuration Guidelines
471
Configuration Procedure
471
Configuring Source MAC-Based ARP Attack Detection
471
Configuration Procedure
472
Displaying and Maintaining Source MAC-Based ARP Attack Detection
472
Configuration Example
473
Configuring ARP Packet Source MAC Consistency Check
474
Configuring ARP Active Acknowledgement
474
Configuring Authorized ARP
474
Configuration Procedure
475
Configuration Example (on a DHCP Server)
475
Configuration Example (on a DHCP Relay Agent)
476
Configuring ARP Attack Detection
477
Configuring User Validity Check
478
Configuring ARP Packet Validity Check
479
Configuring ARP Restricted Forwarding
479
Enabling ARP Attack Detection Logging
480
Displaying and Maintaining ARP Attack Detection
480
User Validity Check Configuration Example
480
User Validity Check and ARP Packet Validity Check Configuration Example
482
ARP Restricted Forwarding Configuration Example
483
Configuring ARP Scanning and Fixed ARP
485
Configuration Restrictions and Guidelines
485
Configuration Procedure
485
Configuring ARP Gateway Protection
485
Configuration Guidelines
486
Configuration Procedure
486
Configuration Example
486
Configuring ARP Filtering
487
Configuration Guidelines
487
Configuration Procedure
487
Configuration Example
487
Configuring ARP Sender IP Address Checking
488
Configuring ND Attack Defense
490
Overview
490
ND Attack Defense Configuration Task List
490
Enabling Source MAC Consistency Check for ND Messages
490
Configuring ND Attack Detection
491
About ND Attack Detection
491
Configuration Guidelines
492
Configuration Procedure
492
Displaying and Maintaining ND Attack Detection
492
ND Attack Detection Configuration Example
492
Configuring RA Guard
494
About RA Guard
494
Specifying the Role of the Attached Device
494
Configuring an RA Guard Policy
495
Enabling the RA Guard Logging Feature
495
Displaying and Maintaining RA Guard
496
RA Guard Configuration Example
496
Configuring Urpf
499
Overview
499
Urpf Check Modes
499
Urpf Operation
499
Network Application
502
Enabling Urpf
502
Displaying and Maintaining Urpf
502
Global Urpf Configuration Example
503
Network Requirements
503
Configuration Procedure
503
Configuring Crypto Engines
504
Overview
504
Displaying and Maintaining Crypto Engines
504
Configuring FIPS
505
Overview
505
Configuration Restrictions and Guidelines
505
Configuring FIPS Mode
506
Entering FIPS Mode
506
Configuration Changes in FIPS Mode
507
Exiting FIPS Mode
508
FIPS Self-Tests
508
Power-Up Self-Tests
509
Conditional Self-Tests
509
Triggering Self-Tests
510
Displaying and Maintaining FIPS
510
FIPS Configuration Examples
510
Entering FIPS Mode through Automatic Reboot
510
Entering FIPS Mode through Manual Reboot
511
Exiting FIPS Mode through Automatic Reboot
513
Exiting FIPS Mode through Manual Reboot
513
Document Conventions and Icons
515
Conventions
515
Network Topology Icons
516
Support and Other Resources
517
Accessing Hewlett Packard Enterprise Support
517
Accessing Updates
517
Websites
518
Customer Self Repair
518
Remote Support
518
Documentation Feedback
518
Index
520
Other manuals for HPE FlexFabric 5940 SERIES
Configuration Guide
334 pages
Fundamentals Command Reference
289 pages
Command Reference
139 pages
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the HPE FlexFabric 5940 SERIES and is the answer not in the manual?
Ask a question
HPE FlexFabric 5940 SERIES Specifications
General
Brand
HPE
Model
FlexFabric 5940 SERIES
Category
Switch
Language
English
Related product manuals
HPE FlexFabric 5950 Series
451 pages
HPE FlexFabric 5710 Series
69 pages
HPE FlexFabric 5700 Series
314 pages
HPE FlexNetwork 5130 EI Series
314 pages
HPE FlexNetwork 5510 HI Series
572 pages
HPE FlexNetwork 5130 HI SERIES
378 pages
FlexNetwork 5130 24G 4SFP+ 1-slot HI
76 pages
HPE Aruba 6200F
11 pages
HPE StoreFabric SN6600B
38 pages
HPE StoreFabric SN2010M
131 pages
HPE OfficeConnect 1405 v3 Series
42 pages
Aruba Networking CX 6200 Series
79 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General