HP 5500 HI Series Configuration Manual page 7

Triple authentication supporting VLAN assignment and Auth-Fail VLAN configuration example ·············· 189
Configuring port security ········································································································································ 195
Overview ······································································································································································· 195
Port security features ··········································································································································· 195
Port security modes ············································································································································· 195
Working with guest VLAN and Auth-Fail VLAN ······························································································ 198
Configuration task list ·················································································································································· 198
Enabling port security ·················································································································································· 199
Setting port security's limit on the number of MAC addresses on a port······························································· 199
Setting the port security mode ···································································································································· 200
Configuration prerequisites ································································································································ 200
Configuration procedure ···································································································································· 200
Configuring port security features ······························································································································ 201
Configuring NTK ················································································································································· 201
Configuring intrusion protection ························································································································ 201
Enabling port security traps ································································································································ 202
Configuring secure MAC addresses ·························································································································· 202
Configuration prerequisites ································································································································ 203
Configuration procedure ···································································································································· 203
Ignoring authorization information ···························································································································· 204
Displaying and maintaining port security ·················································································································· 204
Port security configuration examples ························································································································· 205
Configuring the autoLearn mode ······················································································································· 205
Configuring the userLoginWithOUI mode ········································································································ 207
Configuring the macAddressElseUserLoginSecure mode ················································································ 212
Troubleshooting port security ······································································································································ 214
Cannot set the port security mode ····················································································································· 214
Cannot configure secure MAC addresses ········································································································ 215
Cannot change port security mode when a user is online ·············································································· 215
Configuring a user profile ······································································································································ 217
Overview ······································································································································································· 217
User profile configuration task list ······························································································································ 217
Creating a user profile ················································································································································ 217
Applying a QoS policy ··············································································································································· 218
Enabling a user profile ················································································································································ 218
Displaying and maintaining user profiles ·················································································································· 219
Configuring password control ································································································································ 220
Overview ······································································································································································· 220
FIPS compliance ··························································································································································· 222
Password control configuration task list ····················································································································· 223
Configuring password control ···································································································································· 223
Enabling password control ································································································································· 223
Setting global password control parameters ···································································································· 224
Setting user group password control parameters ···························································································· 225
Setting local user password control parameters ······························································································ 226
Setting super password control parameters ····································································································· 227
Setting a local user password in interactive mode ·························································································· 227
Displaying and maintaining password control ········································································································· 227
Password control configuration example ·················································································································· 228
Configuring HABP ··················································································································································· 231
Overview ······································································································································································· 231
Configuring HABP ························································································································································ 232
v