Index - H3C S9500E Series Security Configuration Manual

Index

802.1X
access control method ................................ 72
architecture ............................................... 65
authentication mode .................................. 65
authentication process ................................ 69
Auth-Fail VLAN ......................................... 75
authorized and unauthorized state ............... 66
basic concepts .......................................... 66
configuration ................................ 65, 75, 82
configuring Auth-Fail VLAN ......................... 81
configuring for port....................................77
configuring globally ................................... 76
configuring guest VLAN ....................... 80, 85
configuring online user handshake function .. 78
configuring parameter for port .................... 78
configuring VLAN assignment ..................... 85
control direction ........................................ 67
controlled and uncontrolled port .................. 66
displaying ................................................ 82
EAP over LAN (EAPOL) .............................. 67
EAP over RADIUS ...................................... 68
EAP packet format ..................................... 68
EAP relay ................................................. 69
EAP termination ........................................ 71
EAP-Message attribute ................................ 68
EAPOL packet format ................................. 67
enabling for port .......................................77
enabling multicast trigger function ............... 79
enabling quiet timer .................................. 80
enabling re-authentication function ............. 80
features working together ........................... 73
guest VLAN .............................................. 74
maintaining .............................................. 82
mandatory authentication domain for specified
port ..................................................... 75
Message-Authenticator attribute .................. 69
specifying mandatory
domain ................................................ 79
timer ....................................................... 73
triggering authentication ............................ 69
unsolicited client triggering ......................... 69
unsolicited device triggering ....................... 69
VLAN assignment ..................................... 73
AAA
AAA-across-VPN ....................................... 26
configuration ................................. 14, 27, 55
configuring accounting method for ISP domain
........................................................... 33
configuring authentication method for ISP
domain ................................................ 30
configuring authorization
domain ................................................ 31
configuring HWTACACS server for telnet user
........................................................... 55
configuring local user attribute .................... 34
configuring NAS ID-VLAN binding .............. 37
configuring RADIUS server for SSH users...... 59
configuring separate server for telnet user .... 57
configuring user group attribute .................. 36
creating ISP domain .................................. 28
creating ISP domain attribute ...................... 29
195
port authentication
method for ISP