HPE FlexFabric 7900 Series Security Configuration Manual page 235

display, 210
mode configuration, 207
mode entry, 207
mode entry (automatic reboot), 211
mode entry (manual reboot), 212
mode exit, 208
mode exit (automatic reboot), 213
mode exit (manual reboot), 214
mode system changes, 208
self-test, 209
FIPS compliance
AAA, 14
password control, 49
PKI, 69
public key management, 57
SSH, 145
SSL, 100
fixed ARP
configuration, 196
configuration restrictions, 197
format
AAA HWTACACS username, 30
AAA RADIUS packet format, 3
AAA RADIUS username, 21
forwarding
IP source guard (IPSG)
configuration, 178, 179, 181
IPv4 source guard (IPv4SG) dynamic binding
configuration, 182
IPv4 source guard (IPv4SG) dynamic
binding+DHCP relay configuration, 183
IPv4 source guard (IPv4SG) static binding
configuration, 181
security ARP restricted forwarding, 194
fragment
IPsec packet DF bit configuration, 117
FTP
AAA RADIUS Login-Service attribute check
method, 26
security local host public key distribution, 58
security SSH SFTP client device
configuration, 153
security SSH SFTP client publickey
authentication, 172
security SSH SFTP configuration, 170
security SSH SFTP directories, 154
security SSH SFTP files, 154
security SSH SFTP packet source IP address, 153
security SSH SFTP server connection
establishment, 153
security SSH SFTP server connection
termination, 155
security SSH SFTP server password
authentication, 170
Fully Qualified Domain Name. Use FQDN
G
gateway
ARP gateway protection, 197, 198
generating
security SSH local DSA key pair, 146
security SSH local RSA key pair, 146
H
HPE
AAA RADIUS HPE proprietary attributes, 12
handshake protocol (SSL), 99
history
password history, 47
HTTP
SSL configuration, 99, 100
HW Terminal Access Controller Access Control
System. Use HWTACACS
HWTACACS
AAA configuration, 1, 14, 38
AAA for SSH user, 38
AAA implementation, 6
AAA local user configuration, 15
AAA scheme, 15
accounting server, 29
authentication server, 28
authorization server, 28
display, 33
HWTACACS/RADIUS differences, 7
maintain, 33
outgoing packet source IP address, 31
packet exchange process, 7
protocols and standards, 10
real-time accounting timer, 31
scheme configuration, 27
scheme creation, 27
scheme VPN, 30
server quiet timer, 31
227