HPE FlexFabric 7900 Series Security Configuration Manual page 237

static binding, 178
ip validity check (ARP), 193
IPsec
ACL configuration, 109
ACL de-encapsulated packet check, 115
ACL IPsec anti-replay configuration, 115
ACL rule keywords, 109
ACL-based implementation, 108
authentication, 106
authentication algorithms, 106
configuration, 104, 119
displaying, 118
encapsulation modes, 104
encryption, 106
encryption algorithms, 107
IKE configuration, 125, 127
IKE configuration (main mode/pre-shared key
authentication), 135
IKE DPD configuration, 133
IKE global identity information
configuration, 131
IKE identity authentication, 126
IKE invalid SPI recovery, 133
IKE keepalive function configuration, 132
IKE keychain configuration, 131
IKE NAT keepalive function configuration, 132
IKE negotiation, 125
IKE negotiation failure troubleshooting (invalid
identity info), 140
IKE negotiation failure troubleshooting (no IKE
proposal or IKE keychain referenced
correctly), 138
IKE negotiation failure troubleshooting (no
proposal match), 138
IKE negotiation failure troubleshooting (no
transform set match), 139
IKE negotiation mode, 106
IKE profile configuration, 128
IKE proposal configuration, 129
IKE SA max number, 134
IKE security mechanism, 126
IKE SNMP notification, 134
IKE troubleshooting, 138
IKE-based tunnel for IPv4 packets
configuration, 121
implementation, 107
maintaining, 118
mirror image ACLs, 109
non-mirror image ACLs, 109
packet DF bit configuration, 117
packet logging enable, 117
PKI configuration, 66, 69, 79, 99
policy application to interface, 114
policy configuration, 111
policy configuration (IKE-based), 112
protocols and standards, 107
QoS pre-classify enable, 116
SA, 106
security protocols, 104
SNMP notification configuration, 118
source interface policy bind, 116
transform set configuration, 110
tunnel establishment, 108
tunnel for IPv4 packets configuration, 119
IPv4
IPsec IKE-based tunnel for IPv4 packets
configuration, 121
IPsec tunnel for IPv4 packets configuration, 119
source guard. See IPv4 source guard
IPv4 source guard (IPv4SG)
configuration, 178, 179, 179, 181
display, 181
dynamic binding configuration, 182
dynamic binding+DHCP relay configuration (on
switch), 183
enable on interface, 179
maintain, 181
static binding configuration, 180, 181
ISAKMP, 125, See also
IPsec IKE configuration, 125, 127
IPsec IKE configuration (main mode/pre-shared key
authentication), 135
ISP
AAA device implementation, 9
AAA ISP domain accounting method, 36
AAA ISP domain authentication method, 34
AAA ISP domain authorization method, 35
AAA ISP domain creation, 33
AAA ISP domain method, 33
AAA ISP domain status, 34
K
229
IKE