HPE FlexNetwork 5510 HI Series - Page 508

495
troubleshooting PKI CA certificate import
failure, 256
troubleshooting PKI CA certificate obtain
failure, 254
CA (MACsec), 461
CAK (MACsec), 461
CAR
user profile configuration, 455
certificate
authority. Use CA
PKI certificate verification (CRL checking),
235
PKI certificate verification (w/o CRL checking),
236
revocation list. Use CRL
challenging
IPsec IKEv2 cookie challenge, 317
changing
SSL change cipher spec protocol, 393
CHAP/PAP authentication
direct/cross-subnet portal authentication
process, 127
re-DHCP portal authentication process, 128
checking
MACsec integrity check, 461
PKI certificate verification (CRL checking),
235
PKI certificate verification (w/o CRL checking),
236
security IPsec ACL de-encapsulated packet
check, 273
uRPF loose check mode, 438
uRPF strict check mode, 438
classifying
security IPsec QoS pre-classify enable, 276
clearing
security IPsec packet DF bit clear, 276
client
802.1X authentication, 68
802.1X authentication (access device
initiated), 67
802.1X authentication (client-initiated), 67
802.1X authentication client timeout timer, 83
802.1X authentication configuration, 94
802.1X authentication initiation, 67
802.1X authorization VLAN configuration, 96
802.1X basic configuration, 94
802.1X configuration, 72, 80
802.1X guest VLAN configuration, 96
802.1X+ACL assignment configuration, 98
MACsec (client-oriented), 470
MACsec operation (client-oriented), 462
security portal authentication, 124
security portal authentication system
components, 123
SSL client policy configuration, 397
command
AAA command accounting method, 12
AAA command authorization method, 12
comparing
802.1X EAP relay/termination authentication, 68
complexity checking (password control), 206
composition checking (password control), 206
conditional self-test, 448
confidentiality
MACsec confidentiality offset, 467
configuring
802.1X Auth-Fail VLAN, 75, 89
802.1X authorization VLAN, 96
802.1X critical VLAN, 76, 90
802.1X critical voice VLAN, 78
802.1X EAD assistant, 100
802.1X guest VLAN, 96
802.1X+ACL assignment, 98
AAA HWTACACS schemes, 33
AAA RADIUS Login-Service attribute check
method, 32
ARP filtering, 428, 429
ARP gateway protection, 428
crypto engine, 443
FIPS, 444
IPsec IKEv2+pre-shared key authentication, 318
IPsec IKEv2+RSA signature authentication, 321
IPv6 ND attack defense RA guard, 483
MAC authentication, 103, 107
MACsec, 465, 470
MACsec (client-oriented), 470
MACsec (device-oriented), 473
MFF, 431, 433
MFF (manual-mode in tree network), 435
NETCONF-over-SSH client user line, 334
NETCONF-over-SSH+password authentication,
390
peer host public key, 220
PKI, 226
Secure Telnet client user line, 334
security IPsec, 259,
280
security IPsec IPv6 routing protocol profile, 278
security IPsec IPv6 routing protocols, 277
security IPsec packet DF bit, 276
security IPsec policy (IKE-based), 269
security IPsec SNMP notification, 279
security IPsec transform set, 265