HPE FlexFabric 7900 Series Security Configuration Manual page 246

troubleshooting PKI CA certificate obtain
failure, 94
troubleshooting PKI certificate export failure, 97
troubleshooting PKI CRL obtain failure, 95
troubleshooting PKI local certificate import
failure, 97
troubleshooting PKI local certificate obtain
failure, 94
troubleshooting PKI local certificate request
failure, 95
troubleshooting PKI storage path set failure, 98
verifying PKI certificate, 75
verifying PKI certificate verification (CRL
checking), 75
verifying PKI certificate verification (w/o CRL
checking), 76
working with SSH SFTP directories, 154
working with SSH SFTP files, 154
profile
IPsec IKE configuration, 128
proposal
IPsec IKE configuration, 129
protecting
ARP gateway protection, 198
protocols and standards
AAA, 10
AAA HWTACACS, 6, 10
AAA RADIUS, 2, 10
IPsec, 107
IPsec IKE, 127
IPsec security protocol 50 (ESP), 104
IPsec security protocol 51 (AH), 104
SSL configuration, 99, 100
SSL protocol stack, 99
public key
displaying, 61
file import, 63
host public key display, 59, 59
host public key export to file, 59
host public key save to file, 59
local host public key distribution, 58
local key pair creation, 57
local key pair destruction, 60
management, 57, 61
peer configuration, 60
peer host public key import from file, 61
peer public key entry, 61, 61
security SSH client host public key
configuration, 148
security SSH password-publickey
authentication, 144
security SSH publickey authentication, 144
security SSH SFTP client publickey
authentication, 172
security SSH Stelnet client publickey
authentication, 168
security SSH Stelnet server publickey
authentication, 159
security SSH user configuration, 149
Public Key Infrastructure. Use
public key management
FIPS compliance, 57
Q
QoS
IPsec QoS pre-classify enable, 116
R
RA
PKI architecture, 67
PKI certificate, 66
RADIUS
AAA configuration, 1, 14, 38
AAA implementation, 2
AAA local user configuration, 15
AAA scheme, 15
accounting server parameters, 20
accounting-on configuration, 25
attributes, 11
authentication server, 19
client/server model, 2
common standard attributes, 11
display, 27
extended attributes, 6
HPE proprietary attributes, 12
HWTACACS/RADIUS differences, 7
information exchange security, 2
Login-Service attribute check method, 26
maintain, 27
outgoing packet source IP address, 23
packet exchange process, 3
packet format, 3
protocols and standards, 10
238
PKI