HPE FlexNetwork 5510 HI Series Security Configuration Guide

519
configuring AAA LDAP user attributes, 41
configuring AAA local user, 18
configuring AAA local user attributes, 19
configuring AAA NAS-ID profile, 48
configuring AAA RADIUS accounting-on, 31
configuring AAA RADIUS Login-Service
attribute check method, 32
configuring AAA RADIUS scheme, 22
configuring AAA RADIUS security policy
server IP address, 32
configuring AAA RADIUS server SSH user
authentication+authorization, 52
configuring AAA RADIUS server status
detection test profile, 23
configuring AAA scheme, 18
configuring AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, 50
configuring AAA user group attributes, 21
configuring and applying IPv6 ND attack
defense RA guard policy, 481
configuring ARP active acknowledgement,
417
configuring ARP attack detection, 420
configuring ARP attack detection (source
MAC-based), 414, 415
configuring ARP attack detection
(user+packet validity check), 423
configuring ARP attack detection packet
validity check, 421
configuring ARP attack detection restricted
forwarding, 422, 424
configuring ARP attack detection user validity
check, 420
configuring ARP attack protection, 411
configuring ARP attack protection
(unresolvable IP attack), 411, 413
configuring ARP attack protection blackhole
routing (unresolvable IP attack), 412
configuring ARP attack protection source
suppression (unresolvable IP attack), 412
configuring ARP filtering, 428, 429
configuring ARP gateway protection, 427, 428
configuring ARP packet rate limit, 413
configuring ARP packet source MAC
consistency check, 416
configuring ARP scanning, 426
configuring authorized ARP (DHCP relay
agent), 419
configuring authorized ARP (DHCP server),
418
configuring authorized ARP configuration, 417
configuring direct portal authentication (local
portal Web server), 144, 179
configuring dynamic IPv4 source guard
(IPv4SG)+DHCP snooping, 406
configuring dynamic IPv6 source guard
(IPv6SG)+DHCPv6 snooping, 409
configuring FIPS mode,
445
configuring fixed ARP, 426
configuring IP source guard (IPSG), 401
configuring IPsec IKEv2, 311
configuring IPsec IKEv2 DPD, 317
configuring IPsec IKEv2 global parameters, 317
configuring IPsec IKEv2 keychain, 316
configuring IPsec IKEv2 NAT keepalive, 317
configuring IPsec IKEv2 policy, 314
configuring IPsec IKEv2 profile, 311
configuring IPsec IKEv2 proposal, 314
configuring IPsec IKEv2+pre-shared key
authentication, 318
configuring IPsec IKEv2+RSA signature
authentication, 321
configuring IPv4 source guard (IPv4SG), 402
configuring IPv4 source guard (IPv4SG) static
binding, 402
configuring IPv6 ND attack defense RA guard,
481, 483
configuring IPv6 ND attack detection, 478, 478,
479
configuring IPv6 source guard (IPv6SG), 403
configuring IPv6 source guard (IPv6SG) static
binding, 404
configuring MAC authentication, 107
configuring MAC authentication (local), 115
configuring MAC authentication (RADIUS-based),
117
configuring MAC authentication ACL assignment,
119
configuring MAC authentication critical VLAN, 112
configuring MAC authentication delay, 110
configuring MAC authentication guest VLAN, 111
configuring MAC authentication keep-online, 114
configuring MAC authentication multi-VLAN
mode, 109
configuring MAC authentication timer, 108
configuring MAC authentication user account
format, 108
configuring MACsec, 465
configuring MACsec (client-oriented), 470
configuring MACsec (device-oriented), 473
configuring MACsec confidentiality offset, 467
configuring MACsec MKA key server priority, 466
configuring MACsec MKA policy, 468

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English