HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

509
flexible service application, 152
reduced payload, 152
simplified con
figuration, 152
IPv4
config
uring firewall default filtering action, 338
config
uring packet filtering on interface, 340
enabli
ng firewall, 338
enabli
ng firewall fragment inspection, 339
se
curity IPsec IKE-based tunnel
configuration, 181
se
curity IPsec tunnel configuration, 179
sou
rce guard. See IPv4 source guard
IPv4 source g
uard
binding entry max number (for port), 408
config
uration, 405, 406, 406
dynamic bi
nding entry, 406
dynamic confi
guration with DHCP
snooping, 411
enabl
e on port, 407
static bin
ding entry, 405
static bin
ding entry configuration, 409
static ent
ry (global), 408
static ent
ry (on interface), 408
IPv6
config
uring firewall default filtering action, 338
config
uring packet filtering on interface, 340
enabli
ng firewall, 338
enabli
ng firewall fragment inspection, 339
I
Psec. See IPv6 IPsec
IPv6 IPs
ec
routing protocols configuration, 153, 177
ISAKMP
, 200, See also IKE
se
curity IPsec IKE
configuration, 200, 203, 209
se
curity IPsec IKE configuration (aggressive
mode/RSA signature authentication), 213
se
curity IPsec IKE configuration (main
mode/pre-shared key authentication), 209
se
curity IPsec IKEv2 configuration, 219
ISP
AAA domain-based user management, 14
se
curity AAA ISP domain accounting methods
configuration, 50
se
curity AAA ISP domain attribute
configuration, 44
se
curity AAA ISP domain authentication
methods configuration, 45
se
curity AAA ISP domain authorization
methods, 48
se
curity AAA ISP domain creation, 43
se
curity AAA ISP domain methods
configuration, 43
K
keepalive
NA
T timer setting, 207
timers
setting, 207
key
IPsec IKE data authentication, 200
port se
curity key negotiation, 136
port s
ecurity PSK, 137
key pair
se
curity SSH DSA host key pair, 351
se
curity SSH RSA host key pair, 351
se
curity SSH RSA server key pair, 351
key
ring
security IPsec IKEv2 configuration, 224
key
word
security IPsec ACL rule keywords, 156
KS
redu
ndancy (group domain VPN), 455
KS redund
ancy
data exchange, 456
kee
palive, 456
prima
ry KS election, 456
L
LAN
se
curity 802.1X overview, 78
Layer 2
portal authentication process, 285
Layer 3
ARP attack protection configuration, 399
portal auth
entication modes, 284
portal auth
entication process, 286
se
curity IPsec configuration, 149, 179
se
curity IPsec IKE-based tunnel
configuration, 181
se
curity IPsec RIPng configuration, 193
se
curity IPsec RRI configuration, 196
se
curity IPsec tunnel configuration, 179
SSH MPLS L3VPN su
pport, 350
URPF config
uration, 448, 448, 450
limit
c
onnection limit, 4
limiting
port se
curity secure MAC addresses, 130
local
name for the local security gateway
configuration, 203
se
curity AAA local authentication
configuration, 20
s
ecurity AAA Telnet/FTP user
authentication/authorization, 61

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English