HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

504
security IPsec encryption algorithm
(DES), 150
se
curity IPsec IKE-based tunnel
configuration, 181
se
curity IPsec RIPng configuration, 193
se
curity IPsec tunnel configuration, 179
se
curity SSH configuration, 348
se
curity SSH server configuration, 351
se
curity SSL services, 384
encryption
fragmentation before/after encryption, 172
publi
c key configuration, 270
publi
c key management, 264
encryption ca
rd
binding policy, policy group, profile to
encryption card, 166
encryption en
gine
enabling the encryption engine, 167
Endpoint Ad
mission Defense. See EAD
entity
se
curity PKI DN configuration, 244
ESP
I
Psec security protocol 50, 149
establi
shing
security SSH SFTP server connection, 359
se
curity SSH Stelnet server connection, 358
Ethernet
security 802.1X overview, 78
excha
nge process (HWTACACS message), 12
exporting
host public key in specific format to file, 267
local host public key
, 266
RSA
key pair, 268, 275
extended fun
ction
configuring cross-subnet portal
authentication, 324
config
uring direct portal authentication, 320
config
uring re-DHCP portal
authentication, 321
F
feature
configuring 802.1X MAC address binding, 100
usin
g 802.1X authentication with other
features, 86
usin
g MAC authentication with other
features, 115
file
s
ecurity SSH SFTP, 361
FIPS
con
ditional self-test, 483
config
uration, 484, 485
config
uration consideration, 484
displ
aying, 485
enabli
ng, 484
k
nown-answer test, 482
mode sy
stem changes, 484
password co
ntrol FIPS compliance, 435
power-up self
-test, 482
publi
c key FIPS compliance, 264
s
ecurity AAA FIPS compliance, 20
se
curity IPsec compliance, 154
se
curity IPsec IKE compliance, 202
se
curity PKI compliance, 243
s
ecurity SSH FIPS compliance, 350
s
elf-test, 482
SSL
FIPS compliance, 385
firewall
ACL
based packet filter, 3, 334
ACL
packet filter limitation, 335
ASPF
, 3, 335
ASPF func
tions, 335
config
uration, 334
config
uring default filtering action, 338
config
uring Ethernet frame filtering, 341
config
uring fragment inspection threshold, 339
config
uring packet filtering on interface, 340
config
uring packet-filter firewall, 338, 342
configuring port mappi
ng for ASPF, 345
displ
aying, 341
enabli
ng, 338
enabli
ng fragment inspection, 339
fragme
nt filtering, 334
maintaining, 341
s
ecurity ASPF configuration, 343, 346
fixed
ARP (ARP attack protection), 403
flood attack
detectio
n and protection, 414
DNS flood att
ack, 414
DNS flood att
ack protection policy
configuration, 418
ICMP
flood attack, 414
ICMP
flood attack protection policy
configuration, 418
prote
ction policy configuration, 418
SYN flood attack, 414
SYN flood attack prote
ction policy
configuration, 418
UDP
flood attack, 414
UDP
flood attack protection policy
configuration, 418
format
802.1X packet, 79

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English