HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

498
configuration restrictions and guidelines
group domain VPN, 456
use
r profile, 397
config
uring
802.1X, 101
802.1X ACL
assignment, 106
802.1X Auth-Fail
VLAN, 98
802.1X critica
l VLAN, 99
802.1X gue
st VLAN, 97, 103
802.1X MAC
address binding, 100
802.1X onlin
e user handshake function, 93
802.1X quiet
timer, 96
802.1X VLAN assi
gnment, 103
AAA
for portal users by RADIUS server, 67
ACL-ba
sed connection limit rule, 430
address po
ol for assigning addresses to
initiators, 222
ARP
attack protection, 399, 399
ARP
attack protection active
acknowledgement, 403
ARP
attack protection against unresolvable IP
attack, 399
ARP
attack protection source
suppression, 400
ARP
automatic scanning, 403
ARP
packet source MAC consistency
check, 403
AR
P source MAC-based attack
detection, 401, 402
attack d
etection and protection, 413
attack p
rotection on interface, 422
attack p
rotection policy, 417
authenti
cation trigger function, 95
Auth-Fail VLAN (802.1X), 87
basi
c settings for a GDOI KS group, 457
blackli
st, 420, 424
client pu
blic key manually, 353
con
nection limit policy, 429
c
onnection limits, 429, 429
critical VLAN
(802.1X), 88
cro
ss-subnet portal authentication, 318
cro
ss-subnet portal authentication across
VPNs, 331
cu
stom portal authentication pages, 294
default co
nnection limit action, 429
default co
nnection limit parameter, 429
dire
ct portal authentication, 312
EAD fast depl
oyment, 108, 110
encryption ca
rd for IPsec, 183
Ethernet fram
e filtering firewall, 341
extended cro
ss-subnet portal authentication, 324
extended di
rect portal authentication, 320
extended re-DHCP
portal authentication, 321
FIPS mode, 484
firewall, 334
firewall d
efault filtering action, 338
firewall fragm
ent inspection threshold, 339
fixed
ARP (ARP attack protection), 403
free IP
(EAD fast deployment), 109
GDOI KS red
undancy, 459
gue
st VLAN (802.1X), 86
HABP
client, 444
HABP
server, 444
IPsec inte
rface backup, 185
IPsec
session idle timeout, 168
IPsec
with tunnel interface, 189
local MA
C authentication, 119
local portal server
, 297
local
RSA key pair for certificate request, 268
MAC authe
ntication, 114, 116, 116, 119
MAC authe
ntication (global), 116
MAC authe
ntication (port-specific), 117
MAC authe
ntication ACL assignment, 122
mandato
ry portal Web page pushing, 310
max numbe
r of online portal users, 301
name for the l
ocal security gateway, 203
NAS ID-VLA
N binding (AAA), 53
online L
ayer 2 portal user detection, 306
online L
ayer 3 portal user detection, 307
packet filterin
g on interface, 340
packet inform
ation pre-extraction, 170
pack
et-filter firewall, 338, 342
port mapping
for ASPF, 345
port s
ecurity, 125, 129, 138
port se
curity client
macAddressElseUserLoginSecure, 144
port se
curity client userLoginWithOUI, 140
port se
curity feature, 132
port s
ecurity for WLAN port, 135
port se
curity intrusion protection feature, 133
port se
curity MAC address autoLearn mode, 138
port se
curity mode for WLAN port, 136
port se
curity NTK feature, 132
port s
ecurity PSK, 137
portal auth
entication, 281
portal auth
entication destination subnet, 301
portal auth
entication source subnet, 300
portal dete
ction functions, 306
portal redirect
ion URL parameter, 309
portal serve
r detection, 307, 326

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English