HPE FlexNetwork 5510 HI Series Security Configuration Guide

510
ARP attack protection configuration, 411
IPsec IKEv2 message retransmission, 310
Message Authentication Code. Use MAC
MFF
basic concepts, 432
configuration, 431, 433, 435
configuration (manual-mode in ring network),
436
configuration (manual-mode in tree network),
435
display, 434
enable, 433
how it works, 433
network port, 432
network port configuration, 433
operation modes, 432
periodic gateway probe enable, 434
protocols and standards, 433
server IP address, 434
user port, 432
minimum password length, 206
mirroring
security IPsec mirror image ACLs, 265
security IPsec non-mirror image ACLs, 265
MKA
MACsec enable, 465
MACsec MKA key server priority, 466
policy application, 469
policy configuration, 468
mode
802.1X EAP relay/termination comparison, 68
802.1X multicast trigger, 67, 85
802.1X unicast trigger, 67, 85
FIPS, 445
MAC authentication multi-VLAN, 109
MACsec application (client-oriented), 462
MACsec application (device-oriented), 462
MACsec validation, 468
MFF manual operation, 432
PKI offline, 232
PKI online, 232
port security, 189
port security authentication control, 185
port security autoLearn MAC learning control,
186
port security MAC learning control, 185
port security MAC learning control autoLearn,
185
port security MAC learning control secure, 185
port security macAddressWithRadius
authentication, 187
port security secure MAC learning control, 186
port security userLogin 802.1X authentication,
187
port security userLoginSecure 802.1X
authentication, 187
port security userLoginSecureExt 802.1X
authentication, 187
port security userLoginWithOUI 802.1X
authentication, 187
security IPsec ACL-based implementation
aggregation, 262
security IPsec ACL-based implementation
per-host, 262
security IPsec ACL-based implementation
standard, 262
security IPsec application-based implementation,
263
security IPsec encapsulation transport, 260
security IPsec encapsulation tunnel, 260
security IPsec IKE negotiation, 261
security IPsec IKE negotiation (time-based
lifetime), 261
security IPsec IKE negotiation (traffic-based
lifetime), 261
security portal authentication, 126
security portal authentication (cross-subnet), 126
security portal authentication (direct), 126
security portal authentication (re-DHCP), 126
troubleshooting port security mode cannot be set,
204
uRPF loose check, 438
uRPF strict check, 438
MPLS L3VPN
AAA implementation, 13
PKI support, 228
security portal authentication (cross-subnet for
MPLS L3VPN), 177
multicast
802.1X multicast trigger mode, 67, 85
N
NAS
AAA configuration, 17
AAA device implementation, 11
AAA HWTACACS implementation, 6
AAA LDAP implementation, 9
AAA MPLS L3VPN implementation, 13
AAA NAS-ID profile configuration, 48
AAA RADIUS implementation, 2
AAA RADIUS security policy server IP address,
32
applying interface NAS-ID profile (RADIUS),
141
port security NAS-ID profile, 194

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English