HPE FlexFabric 7900 Series Security Configuration Manual page 238

keepalive
IPsec IKE function configuration, 132
IPsec IKE NAT function configuration, 132
key
IPsec IKE pre-shared key authentication, 126
PKI configuration, 66, 69, 79, 99
key pair
security SSH DSA host key pair, 146
security SSH RSA host key pair, 146
security SSH RSA server key pair, 146
keychain
IPsec IKE configuration, 131
keyword
IPsec ACL rule keywords, 109
L
Layer 3
IPsec configuration, 104, 119
IPsec IKE-based tunnel for IPv4 packets
configuration, 121
IPsec tunnel for IPv4 packets configuration, 119
PKI MPLS L3VPN support, 68
limiting
ARP packet rate limit, 188
local
AAA local accounting method, 9
AAA local authentication, 9
AAA local authentication configuration, 14
AAA local authorization method, 9
AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, 39
password control parameters (local user), 51
PKI digital certificate, 66
security host public key display, 59, 59
security host public key distribution, 58
security host public key export to file, 59
security host public key save to file, 59
security key pair creation, 57
security key pair destruction, 60
troubleshooting PKI certificate obtain failure, 94
troubleshooting PKI certificate request failure, 95
troubleshooting PKI local certificate import
failure, 97
logging
IPsec packet logging enable, 117
password events, 48
security ARP detection logging enable, 194
logging in
AAA concurrent login user max, 37
password expired login, 47
password user first login, 48
password user login attempt limit, 48
password user login control, 48
RADIUS Login-Service attribute, 26
LSP
static feature and software version
compatibility, 69, 100
M
MAC
ARP attack detection (source MAC-based), 189
SSL services, 99
MAC addressing
ARP attack detection (source MAC-based), 190
ARP packet source MAC consistency check, 191
IP source guard (IPSG) configuration, 178, 179, 181
IPv4 source guard (IPv4SG) dynamic binding
configuration, 182
IPv4 source guard (IPv4SG) dynamic
binding+DHCP relay configuration, 183
IPv4 source guard (IPv4SG) static binding
configuration, 181
security ARP attack protection configuration, 185
maintaining
AAA HWTACACS, 33
AAA RADIUS, 27
IP source guard (IPSG), 181
IPsec, 118
IPsec IKE, 135
IPv4 source guard (IPv4SG), 181
password control, 53
security ARP detection, 195
managing
security public keys, 57, 61
manual
FIPS mode (manual reboot), 207
FIPS mode entry (manual reboot), 212
FIPS mode exit (manual reboot), 208, 214
message
security ARP attack protection configuration, 185
Message Authentication Code. Use
minimum password length, 46
mirroring
230
MAC