HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

511
message
enabling RADIUS trap function, 36
excha
nge process (HWTACACS), 12
excha
nge process (RADIUS), 7
Messag
e Authentication Code. Use MAC
method
802.1X access control, 86
mirro
ring
security IPsec mirror image ACLs, 157
se
curity IPsec non-mirror image ACLs, 157
mobile servi
ce
port security WLAN configuration, 135
WLAN
port security mode configuration, 136
mode
port security, 130
port se
curity authentication control mode, 125
port se
curity autoLearn MAC learning control
mode, 127
port se
curity MAC learning control autoLearn
mode, 125
port se
curity MAC learning control mode, 125
port se
curity MAC learning control secure
mode, 125
port se
curity macAddressWithRadius
authentication, 127
port se
curity secure MAC learning control
mode, 127
portal auth
entication, 284
se
curity 802.1X EAP relay/termination
comparison, 82
se
curity IPsec encapsulation transport, 150
se
curity IPsec encapsulation tunnel, 150
se
curity IPsec IKE negotiation, 150
se
curity IPsec IKE negotiation (time-based
lifetime), 150
se
curity IPsec IKE negotiation (traffic-based
lifetime), 150
s
ecurity PKI offline, 246
se
curity PKI online, 246
trouble
shooting cannot change port security
mode when user online, 148
use
rLogin 802.1X authentication mode, 127
use
rLoginSecure 802.1X authentication
mode, 127
use
rLoginSecureExt 802.1X authentication
mode, 127
use
rLoginWithOUI 802.1X authentication
mode, 127
WLAN
port security mode, 136
MPLS L3VPN
s
ecurity AAA implementation, 16
MPLS L3VPN (SSH), 350
multicast
se
curity group domain VPN
configuration, 453, 465
N
NAS
c
onfiguring NAS ID-VLAN binding (AAA), 53
Port-T
ype (RADIUS), 304
se
curity AAA configuration, 20
s
ecurity AAA HWTACACS implementation, 11
se
curity AAA MPLS L3VPN implementation, 16
se
curity AAA RADIUS implementation, 7
s
ecurity AAA RADIUS security policy server IP
address configuration, 35, 35
spe
cifying interface NAS ID profile (RADIUS), 304
spe
cifying interface NAS-Port-ID, 304
NA
T
transparent data transmission without NAT, 172
need to kno
w. Use NTK
negotiatin
g
port security PSK, 137
se
curity IPsec IKE negotiation mode, 150
netwo
rk
authentication/accounting server (portal
authentication), 282
bindin
g IPsec policy, policy group, profile to
encryption card, 166
config
uring IPsec interface backup, 185
config
uring portal authentication destination
subnet, 301
config
uring portal authentication source
subnet, 300
config
uring RADIUS related attributes, 303, 303
config
uring the IPsec session idle timeout, 168
config
uring Web proxy for Layer 2 portal
authentication, 302
disa
bling first-time authentication, 357, 357
enabli
ng first-time authentication, 357, 357
enabli
ng IPsec module backup, 167
enabli
ng Layer 2 portal authentication, 298
enabli
ng Layer 3 portal authentication, 298
enabli
ng portal authentication, 298
enabli
ng the encryption engine, 167
encryption ca
rd configuration for IPsec, 183
fragme
ntation before/after encryption, 172
invalid SPI recovery
, 170
local p
ortal authentication server, 283
packet inform
ation pre-extraction
configuration, 170
packet inform
ation pre-extraction configuration on
the IPsec tunnel interface, 176
port se
curity feature configuration, 132

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English