HPE FlexFabric 7900 Series Security Configuration Manual page 245

enabling password control, 49
enabling security ARP detection logging, 194
enabling security SFTP server, 147
enabling security SSH Stelnet server, 147
enabling SSH SCP server, 147
enabling TCP fragment attack prevention, 215
entering FIPS mode (automatic
reboot), 207, 211
entering FIPS mode (manual reboot), 207, 212
entering security peer public key, 61, 61
establishing security SSH SFTP server
connection, 153
establishing security SSH Stelnet server
connection, 152
exiting FIPS mode, 208
exiting FIPS mode (automatic reboot), 208, 213
exiting FIPS mode (manual reboot), 208, 214
exporting PKI certificate, 77
exporting security host public key to file, 59
generating security SSH local DSA key pair, 146
generating security SSH local RSA key pair, 146
implementing ACL-based IPsec, 108
importing security peer host public key from
file, 61
importing security public key from file, 63
maintaining AAA HWTACACS, 33
maintaining AAA RADIUS, 27
maintaining IP source guard (IPSG), 181
maintaining IPsec, 118
maintaining IPsec IKE, 135
maintaining IPv4 source guard (IPv4SG), 181
maintaining password control, 53
maintaining security ARP detection, 195
obtaining PKI certificate, 74
removing PKI certificate, 77
requesting PKI certificate request, 72
saving security host public key to file, 59
setting AAA concurrent login user max, 37
setting AAA HWTACACS timer, 31
setting AAA HWTACACS traffic statistics
unit, 30
setting AAA HWTACACS username format, 30
setting AAA ISP domain status, 34
setting AAA RADIUS request transmission
attempts max, 22
setting AAA RADIUS server status, 22
setting AAA RADIUS timer, 24
setting AAA RADIUS traffic statistics unit, 21
setting AAA RADIUS username format, 21
setting password control parameters (global), 50
setting password control parameters (local user), 51
setting password control parameters (super), 52
setting password control parameters (user
group), 51
specifying AAA HWTACACS accounting server, 29
specifying AAA HWTACACS authentication
server, 28
specifying AAA HWTACACS authorization
server, 28
specifying AAA HWTACACS outgoing packet
source IP address, 31
specifying AAA HWTACACS scheme VPN, 30
specifying AAA HWTACACS shared keys, 29
specifying AAA RADIUS accounting server
parameters, 20
specifying AAA RADIUS authentication server, 19
specifying AAA RADIUS outgoing packet source IP
address, 23
specifying AAA RADIUS scheme VPN, 21
specifying AAA RADIUS shared keys, 21
specifying PKI CA storage path, 76
specifying security SSH packet source IP
address, 151
specifying security SSH SFTP packet source IP
address, 153
terminating security SSH SFTP server
connection, 155
triggering FIPS self-test, 210
troubleshooting AAA RADIUS accounting error, 45
troubleshooting AAA RADIUS authentication
failure, 44
troubleshooting AAA RADIUS packet delivery
failure, 45
troubleshooting IPsec IKE, 138
troubleshooting IPsec IKE negotiation failure (invalid
identity info), 140
troubleshooting IPsec IKE negotiation failure (no IKE
proposal or IKE keychain referenced correctly), 138
troubleshooting IPsec IKE negotiation failure (no
proposal match), 138
troubleshooting IPsec IKE negotiation failure (no
transform set match), 139
troubleshooting PKI CA certificate import failure, 96
237