HPE FlexNetwork 5510 HI Series Security Configuration Guide

501
802.1X mandatory port authentication
domain, 86
802.1X supported domain name delimiters, 92
AAA ISP domain accounting method, 47
AAA ISP domain attribute, 44
AAA ISP domain authentication method, 44
AAA ISP domain authorization method, 45
MAC authentication, 108
PKI domain configuration, 230
security portal authentication domain, 135
Don't Fragment bit. See DF bit
DPD
IPsec IKEv2 DPD, 317
security IPsec IKE DPD, 298
DSA
host public key display, 219
host public key export, 219
peer host public key entry, 221
public key import from file, 223
public key management, 217, 221
security IPsec IKE signature authentication,
291
SSH client host public key configuration, 334
SSH Secure Telnet client configuration
(publickey authentication-enabled), 365
dst-mac validity check (ARP attack detection), 421
dynamic
IP source guard (IPSG) dynamic binding, 401
IPv4 source guard (IPv4SG)+DHCP relay
agent configuration, 407
IPv4 source guard (IPv4SG)+DHCP snooping
configuration, 406
IPv6 source guard (IPv6SG)+DHCPv6
snooping configuration, 409
E
EAD
802.1X authentication+EAD assistant, 79
802.1X EAD assistant, 93, 100
troubleshooting 802.1X EAD assistant Web
browser users, 102
EAP
802.1X EAP over RADIUS, 66
802.1X EAP relay enable, 81
802.1X EAP termination enable, 81
802.1X EAP termination mode authentication,
70
802.1X packet format, 65
802.1X RADIUS EAP-Message attribute, 66
802.1X RADIUS Message-Authentication
attribute, 67
802.1X relay authentication, 69
802.1X relay/termination authentication, 68
EAPOL
802.1X authentication (access device initiated),
67
802.1X authentication (client-initiated), 67
802.1X packet format, 66
ECDSA
feature and software version compatibility, 331
peer host public key entry, 221
public key import from file, 223
public key management, 217, 221
Elliptic Curve Digital Signature Algorithm. Use ECDSA
email (PKI secure), 228
enabling
802.1X, 80
802.1X critical voice VLAN, 91
802.1X EAP relay, 81
802.1X EAP termination, 81
802.1X guest VLAN assignment delay, 88
802.1X periodic online user reauthentication, 87
AAA RADIUS server load sharing, 29
AAA RADIUS session-control, 48
AAA RADIUS SNMP notification, 32
ARP attack detection logging, 422
IPsec IKEv2 cookie challenge, 317
IPv4 source guard (IPv4SG) on interface, 402
IPv6 ND attack defense RA guard logging, 482
IPv6 source guard (IPv6SG) on interface, 403
MAC authentication, 107
MAC authentication critical voice VLAN, 113
MAC authentication multi-VLAN mode, 109
MAC authentication offline detection, 114
MACsec desire, 465
MACsec MKA, 465
MFF, 433
MFF periodic gateway probe, 434
NETCONF-over-SSH, 333
parallel processing with 802.1X authentication,
110
port security, 188
port security authorization-fail-offline, 194
port security MAC move, 193
port security SNMP notification, 195
security IPsec ACL de-encapsulated packet
check, 273
security IPsec IKE invalid SPI recovery, 299
security IPsec packet logging, 276
security IPsec QoS pre-classify,
276
security password control, 209
security portal authentication, 131
security portal authentication roaming, 141

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English