HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

526
FIPS configuration consideration, 484
FIPS mode system changes, 484
FIPS s
elf-test, 482
firewall config
uration, 334
flood attack, 414
flood attack p
rotection policy
configuration, 418
fragme
ntation before/after encryption, 172
global IKEv2 para
meters configuration, 221
grou
p domain VPN configuration, 453, 465
grou
p domain VPN establishment, 454
grou
p domain VPN KS redundancy, 455
grou
p domain VPN structure, 453
identity authe
ntication, 1
IKEv2 DPD configuration, 221
invalid SPI recovery
, 170
IP
, 149, See also IPsec
IP
source guard configuration, 405, 406
IP
source guard dynamic binding entry, 406
IP
source guard static binding entry, 405
IPsec
ACL de-encapsulated packet
check, 168
IPsec A
CL-based implementation, 155
IPsec a
nti-replay configuration, 168
IPsec configu
ration, 179
IPsec IKE
ACL configuration error, 218
IPsec IKE co
nfiguration, 200, 203, 209
IPsec IKE co
nfiguration (aggressive
mode/RSA signature authentication), 213
IPsec IKE co
nfiguration (main
mode/pre-shared key authentication), 209
IPsec IKE DPD dete
ctor configuration, 208
IPsec IKE failed to establi
sh an IPsec
tunnel, 217
IPs
ec IKE invalid user ID, 216
I
Psec IKE mechanism, 200
IPsec IKE pe
er configuration, 205
IPsec IKE pro
posal configuration, 204
IPsec IKE pro
posal mismatch, 217
IPsec IKE trouble
shooting, 216
IPsec IKE-ba
sed tunnel configuration, 181
IPsec IKEv2 certificate aut
hentication, 233
IPsec IKEv2 config
uration, 219, 220, 227
IPsec IKEv2 keyrin
g configuration, 224
IPsec IKEv2 negotiatio
n failure
troubleshooting (IPsec tunnels cannot be set
up), 240
IPsec IKEv2 negotiatio
n failure
troubleshooting (no proposal match), 240
IPsec IKEv2 new featu
re, 219
IPsec IKEv2 policy configu
ration, 223
IPsec IKEv2 pre
-shared key authentication, 227
IPsec IKEv2 profile config
uration, 225
IPsec IKEv2 prop
osal configuration, 223
IPsec IKEv2 troubl
eshooting, 240
IPsec impl
ementation, 154
IPsec IPv6 ro
uting protocols, 153, 177
IPsec p
acket information pre-extraction
configuration, 170
IPsec p
acket information pre-extraction
configuration on the IPsec tunnel interface, 176
IPsec p
olicy application to interface, 165
IPsec p
olicy configuration, 160, 160
IPsec p
olicy configuration (IKE-based), 161
IPsec p
rofile configuration, 174
IPsec RIPng
configuration, 193
IPs
ec RRI, 153, 171
IPsec RRI
configuration, 196
IPsec
shared source interface policy group
configuration, 169
IPsec tra
nsform set configuration, 158
IPsec tun
nel configuration, 179
IPsec tun
nel interface configuration, 175, 189
IPsec tunn
el interface-based implementation, 173
IPv4 source g
uard dynamic configuration with
DHCP snooping, 411
IPv4 source g
uard static binding entry
configuration, 409
kee
palive timers setting, 207
k
nown-answer test, 482
limits on the numbe
r of IKEv2 SAs setting, 222
local MA
C authentication configuration, 119
local u
ser password set (interactive mode), 440
MAC authe
ntication ACL assignment
configuration, 122
MAC authe
ntication
configuration, 114, 116, 116, 119
MAC
authentication configuration (global), 116
MAC authe
ntication configuration
(port-specific), 117
MAC authe
ntication delay configuration, 118, 118
maintaining ASPF
, 346
maintaining IPsec IKE, 209
maintaining IPsec IKEv2, 227
maintaining packet-filter firewall, 341
maintaining password
control, 440
mec
hanism (RADIUS), 7
name for the l
ocal security gateway
configuration, 203
NA
T keepalive timer setting, 207
netwo
rk service, 1
netwo
rk technology, 1
network
threat, 1

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English