Security Volume - H3C S5500-SI Series Operation Manual

Security Volume

Table 3-6 Features in the Security volume
Features
AAA
802.1X
HABP
MAC Authentication
Portal
Port Security
IP Source Guard
Authentication, Authorization and Accounting (AAA) provide a uniform
framework used for configuring these three security functions to
implement the network security management. This document describes:
Introduction to AAA, RADIUS and HWTACACS
AAA configuration
RADIUS configuration
HWTACACS configuration
IEEE 802.1X (hereinafter simplified as 802.1X) is a port-based network
access control protocol that is used as the standard for LAN user access
authentication. This document describes:
802.1X overview
802.1X configuration
802.1X Guest-VLAN configuration
On an HABP-capable switch, HABP packets can bypass 802.1X
authentication and MAC authentication, allowing communication among
switches in a cluster. This document describes:
Introduction to HABP
HABP configuration
MAC authentication provides a way for authenticating users based on
ports and MAC addresses; it requires no client software to be installed on
the hosts. This document describes:
RADIUS-Based MAC Authentication
Local MAC Authentication
Portal authentication, as its name implies, helps control access to the
Internet. This document describes:
Portal overview
Portal configuration
Port security is a MAC address-based security mechanism for network
access controlling. It is an extension to the existing 802.1X authentication
and MAC authentication. This document describes:
Enabling Port Security
Setting the Maximum Number of Secure MAC Addresses
Setting the Port Security Mode
Configuring Port Security Features
Configuring Secure MAC Addresses
Ignoring Authorization Information from the Server
By filtering packets on a per-port basis, IP source guard prevents illegal
packets from traveling through, thus improving the network security. This
document describes:
Configuring a Static Binding Entry
Configuring Dynamic Binding Function
3-6
Description