HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

495
creating local pair, 265
destroying local pair, 268
destroying lo
cal RSA pair, 250
attac
k
attack protection policy applying to
interface, 420
attack p
rotection policy configuration, 417
cre
ating attack protection policy, 416
detectio
n and protection, 4
flood attack, 414, 418
prote
ction against Naptha attack, 427, 428
scanni
ng attack, 414
singl
e-packet attack, 413
attack d
etection and protection
ARP, 4, 4
attack p
rotection policy configuration, 417
blackli
st configuration, 420
blackli
st function, 414
config
uration, 413
config
uration on interface, 422
config
uring blacklist, 424
config
uring statistics, 425
cre
ating attack protection policy, 416
displ
aying, 421
displ
aying attack detection and
protection, 421
enabli
ng TCP fragment attack protection, 421
enabli
ng traffic statistics on interface, 421
flood attack, 413, 414
flood attack p
rotection policy
configuration, 418
IP
source guard, 4
maintaining, 421
maintainin
g attack detection and
protection, 421
scanni
ng attack, 413, 414
scanni
ng attack protection policy, 417
singl
e-packet attack, 413, 413
singl
e-packet attack protection policy, 417
TCP
attack protection, 4
traf
fic statistics function, 415
URP
F, 4
attack p
rotection
against Naptha attack, 427, 428
ASPF c
onfiguration, 335
config
uration on interface, 422
config
uring packet-filter firewall, 338, 342
firewall config
uration, 334
s
ecurity ASPF configuration, 343, 346
SYN c
ookie, 427
TCP
attack protection configuration, 427
attack p
rotection policy
applying to interface, 420
config
uration, 417
cre
ating, 416
traf
fic statistics function, 415
attribute
EAP-Message (802.1X), 80
Messag
e-Authentication (802.1X), 81
RADIUS, 17
RADIUS com
mon, 17
RADIUS exte
nded, 11
se
curity AAA HWTACACS scheme
configuration, 37
se
curity AAA ISP domain attribute
configuration, 44
se
curity AAA local user attribute configuration, 23
se
curity AAA local user configuration, 22
se
curity AAA RADIUS proprietary attributes
(vendor ID 25506), 19
se
curity AAA RADIUS scheme configuration, 26
se
curity AAA scheme configuration, 22
se
curity AAA user group attribute
configuration, 25
spe
cifying interface NAS ID profile, 304
spe
cifying interface NAS-Port-ID, 304
spe
cifying interface NAS-Port-Type, 304
authenti
cating
port security authentication modes, 125
port se
curity client
macAddressElseUserLoginSecure
configuration, 144
port se
curity client userLoginWithOUI
configuration, 140
port se
curity configuration, 125, 129, 138
port se
curity MAC address autoLearn mode
configuration, 138
se
curity AAA configuration, 6, 20
se
curity AAA ISP domain authentication methods
configuration, 45
se
curity AAA local Telnet/FTP user
authentication/authorization, 61
se
curity AAA RADIUS server Telnet/SSH user
authentication/authorization, 55
se
curity IPsec authentication algorithms, 150
se
curity IPsec Authentication Header. Use AH
se
curity IPsec configuration, 149, 179
se
curity IPsec Encapsulating Security Payload.
Use ESP
se
curity IPsec IKE configuration (aggressive
mode/RSA signature authentication), 213
se
curity IPsec IKE configuration (main
mode/pre-shared key authentication), 209

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English