HPE FlexFabric 7900 Series Security Configuration Manual page 234

IPsec IKE signature authentication, 126
security public key management, 57, 61
security SSH client host public key
configuration, 148
security SSH DSA host key pair, 146
security SSH Stelnet client publickey
authentication, 168
dst-mac validity check (ARP), 193
dynamic
IP source guard (IPSG) dynamic binding, 179
IPv4 source guard (IPv4SG) dynamic binding
configuration, 182
IPv4 source guard (IPv4SG) dynamic
binding+DHCP relay configuration, 183
E
ECDSA
security public key management, 57, 61
email (PKI secure), 68
enabling
AAA RADIUS session-control, 37
AAA RADIUS SNMP notification, 26
IPsec ACL de-encapsulated packet check, 115
IPsec IKE invalid SPI recovery, 133
IPsec packet logging, 117
IPsec QoS pre-classify, 116
IPv4 source guard (IPv4SG) on interface, 179
password control, 49
security ARP detection logging, 194
security SFTP server, 147
security SSH Stelnet server, 147
SSH SCP server, 147
TCP fragment attack prevention, 215
encapsulating
IPsec ACL de-encapsulated packet check, 115
IPsec anti-replay configuration, 115
IPsec configuration, 104, 119
IPsec IKE-based tunnel for IPv4 packets
configuration, 121
IPsec transport mode, 105
IPsec tunnel for IPv4 packets configuration, 119
IPsec tunnel mode, 105
encrypting
IPsec, 106
IPsec configuration, 104, 119
IPsec encryption algorithm (3DES), 107
IPsec encryption algorithm (AES), 107
IPsec encryption algorithm (DES), 107
IPsec IKE-based tunnel for IPv4 packets
configuration, 121
IPsec tunnel for IPv4 packets configuration, 119
security peer public key entry, 61
security public key import from file, 63
security public key management, 57, 61
security SSH configuration, 143
security SSH server configuration, 145
SSL services, 99
entering
FIPS mode (automatic reboot), 207, 211
FIPS mode (manual reboot), 207, 212
security peer public key, 61, 61
ESP
IPsec security protocol 50, 104
establishing
IPsec tunnel establishment, 108
security SSH SFTP server connection, 153
security SSH Stelnet server connection, 152
Ethernet
security ARP attack protection configuration, 185
exiting
FIPS mode (automatic reboot), 208, 213
FIPS mode (manual reboot), 208, 214
exporting
PKI certificate, 77
PKI certificate import/export, 88
security host public key to file, 59
troubleshooting PKI certificate export failure, 97
F
feature
static LSP software version compatibility, 69, 100
Federal Information Processing Standard. Use
file
security host public key export to file, 59
security peer host public key import from file, 61
security public key import from file, 63
security SSH SCP file transfer with password
authentication, 175
security SSH SFTP, 154
filtering
ARP packets, 199, 199
FIPS
configuration, 206, 211
configuration restrictions, 206
226
FIPS