HPE FlexFabric 5940 SERIES User Manual

509
access control policy
PKI certificate-based access control
policy, 287
ac
cessing
portal authentication device access, 137
accou
nt idle time (password control), 242
accou
nting
AAA configuration, 1, 19, 57
AAA
device ID configuration, 57
AAA
ISP domain accounting method, 51
AAA
RADIUS accounting server
parameters, 27
AAA
RADIUS accounting-on, 33
AAA
SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, 59
ACK flood attack, 431
ACL
802.1X+A
CL assignment configuration, 107
802.1Xauth
entication+ACL assignment, 86
attack
D&P detection exemption, 435
I
Psec ACL, 304
IPsec
ACL de-encapsulated packet
check, 312
I
Psec ACL rule keywords, 304
IPsec A
CL-based implementation, 302, 303
IPsec
ACL-based tunnel establishment, 303
IPsec mi
rror image ACLs, 305
IPsec MPLS
L3VPN protection, 305
IPsec n
on-mirror image ACLs, 305
MAC authe
ntication ACL
assignment, 118, 132
SSH manag
ement parameters, 366
active
ARP active acknowledgement, 461
portal auth
entication type, 136
address
global u
RPF configuration, 490
uRPF configu
ration, 486
uRPF en
able, 489
address po
ol
portal user preauthentication IP address
pool, 152
Addre
ss Resolution Protocol. Use ARP
AES
IPsec e
ncryption algorithm, 301
AH
I
Psec security protocol 51, 299
alert protocol (SSL), 419
algorith
m
IPsec authentication, 301
IPs
ec encryption (3DES), 301
IPs
ec encryption (AES), 301
I
Psec encryption (DES), 301
IPsec IKE DH algorithm, 328
keychain conf
iguration, 250, 251
SSH negotiati
on, 359
SSH2, 379
SSH2 en
cryption, 380
SSH2 key ex
change, 379
SSH2 MAC, 380
SSH2 publi
c key, 379
anti-replay
IPsec anti-replay redundancy, 313
IPsec configu
ration, 313
any authenti
cation (SSH), 359
appli
cation
IPsec application-based implementation, 302
IPsec a
pplication-based tunnel
establishment, 303
uRPF net
work, 489
applying
attack D&P policy application (device), 435, 435
IPs
ec policy to interface, 312
port s
ecurity NAS-ID profile, 221
portal authe
ntication interface NAS ID profile, 161
architectu
re
802.1X, 71
PKI, 266
ARP
attack p
rotection. See ARP attack protection
portal auth
entication client ARP entry
conversion, 165
scanni
ng configuration restrictions, 472
ARP
attack protection
active acknowledgement, 461
A
RP attack detection display, 467
ARP
attack detection maintain, 467
ARP
sender IP address checking
configuration, 475
authori
zed ARP configuration, 461
authori
zed ARP configuration (DHCP relay
agent), 463
authori
zed ARP configuration (DHCP server), 462
config
uration, 455
config
uration (user+packet validity check), 469
detectio
n configuration, 464
filtering co
nfiguration, 474, 474
fixed ARP
configuration, 472
gateway prot
ection, 472, 473
loggin
g enable, 467
packet rate li
mit configuration, 457

HPE FlexFabric 5940 SERIES Specifications

General

Brand	HPE
Model	FlexFabric 5940 SERIES
Category	Switch
Language	English