HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

494
configuring port mapping for ASPF, 345
MAC authentication ACL assignment, 115
packet filter (f
irewall), 334
se
curity IPsec ACL de-encapsulated packet
check, 168
se
curity IPsec ACL rule keywords, 156
se
curity IPsec ACL-based
implementation, 154, 155
se
curity IPsec configuration, 156
se
curity IPsec mirror image ACLs, 157
se
curity IPsec non-mirror image ACLs, 157
se
curity IPsec protection mode, 158
se
curity SSH management parameters, 355
verifying 802.
1X assignment
configuration, 107
ACL
packet filter
fragment filtering (firewall), 334
limitation (firewall), 335
ACL-ba
sed connection limit rule, 429
active
acknowledgement (ARP attack
protection), 403
address
blackli
st function, 414
se
curity URPF configuration, 451
address po
ol
address pool for assigning addresses to
initiators, 222
AES
se
curity IPsec encryption algorithm, 150
AH
I
Psec security protocol 51, 149
alert protocol (SSL), 384
algorith
m
public key configuration, 270
publi
c key management, 264
se
curity IPsec authentication, 150
se
curity IPsec encryption (3DES), 150
s
ecurity IPsec encryption (AES), 150
se
curity IPsec encryption (DES), 150
se
curity IPsec IKE DH algorithm, 200
se
curity SSH negotiation, 349
anti-replay (I
Psec), 168
any authenti
cation (SSH), 349
appli
cation
security IPsec implementation, 154
appli
cation (URPF network), 450
Applicatio
n Specific Packet Filter. Use ASPF
applying
attack protection policy to interface, 420
con
nection limit policy, 431
s
ecurity ASPF policy to interface, 344
s
ecurity GDOI IPsec policy to interface, 464
s
ecurity IPsec policy to interface, 165
se
curity QoS policy to IPsec tunnel interface, 177
architectu
re
security PKI, 242
architectu
re (802.1X), 78
ARP
attack d
etection and protection, 4
ARP
attack protection
configuration, 399, 399
config
uring active acknowledgement, 403
config
uring automatic scanning, 403
config
uring fixed ARP, 403
config
uring source suppression, 400
config
uring unresolvable IP attack defense, 399
displ
aying source MAC-based ARP attack
detection, 402
displ
aying source suppression, 400
packet source MAC co
nsistency check, 403
sou
rce MAC-based attack detection
configuration, 401, 402
unre
solvable IP attack protection, 400
ASPF
appli
cation layer protocol inspection, 3, 335, 336
basi
c concepts, 335
config
uration, 343, 346
config
uring port mapping, 345
displ
aying, 346
enabli
ng session logging, 345
enha
nced session logging, 335
ESP
inspection, 335
interface poli
cy application, 344
java blocking,
335
maintaining, 346
PA
M, 335
policy configu
ration, 344
TCP
inspection, 335
TCP
SYN check, 335
transpo
rt layer protocol inspection, 3, 337
UDP
inspection, 335
ASPF (s
tatus-based firewall), 335
assigni
ng
802.1X ACL, 89
MAC authe
ntication ACL, 115
MAC authe
ntication VLAN assignment, 115
VLAN (802.1X), 86
as
sociating
security IPsec SA, 150
as
ymmetric key
algorithm, 264

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English