HP A6600 Configuration Manual page 481

configuring packet filtering firewall, 351
configuring packet information pre-extraction, 261
configuring packet
protection), 418
EAP format (802.1X), 74
EAP over LAN (802.1X), 73
EAP relay, 76
EAP termination, 78
EAPOL format (802.1X), 73
enabling ACL check of de-encapsulated IPsec
packet, 260
enabling information pre-extraction on IPsec tunnel
interface, 268
enabling invalid SPI recovery (IPsec), 261
enabling source MAC consistency check for
packet (ND attack defense), 436
filtering firewall, 345
flood attack, 387
format (RADIUS), 4
FTP ALG configuration, 358
IP source guard configuration, 407, 410
IPsec encapsulation modes, 244
IPv4 source guard dynamic binding by DHCP
relay configuration, 413
IPv4 source guard dynamic binding by DHCP
snooping configuration, 411
NBT ALG configuration, 360
scanning attack, 387
session management configuration, 361
setting shared keys (HWTACACS), 36
setting shared keys (RADIUS), 23
single-packet attack, 386
SIP/H.323 ALG configuration, 359
specifying source IP address for outgoing portal
packets, 132
static IPv4 source
configuration, 410
PAM (ASPF), 347
rate limit (ARP attack
guard binding entry
parameter
configuring parameter filtering, 381
configuring URL filtering, 377
setting global password control parameters, 201
setting local user password control parameters,
202
setting local user password in interactive mode,
203
setting management parameter (SSH2.0), 312
setting super password control parameters, 203
setting user group password control parameters,
202
specifying accounting (HWTACACS), 35
specifying accounting and parameters (RADIUS),
22
URL parameter filtering, 375
password
control configuration, 197, 200, 204
displaying password control, 204
enabling control, 200
maintaining password control, 204
setting global control parameters, 201
setting local user control parameters, 202
setting local user in interactive mode, 203
setting super control parameters, 203
setting user group control parameters, 202
payload field check (IKE), 293
peer (IKE configuration), 290
persistent session rule (session management), 365
PFS feature (IKE), 286
PKI
applications, 220
applying RSA digital signature in IKE negotiation,
237
architecture, 220
CA, 220
469