Cisco Nexus 9000 Series Configuration Manual page 558

INDEX
298
match {ip | ipv6} address
match access-group name 473, 474, 481, 482, 483, 485
match exception {ip | ipv6} icmp redirect
match exception {ip | ipv6} icmp unreachable
match exception {ip | ipv6} option
match mac address 298
match protocol arp 473, 474
N
no {periodic | absolute} 281, 282
no aaa authentication login {console | default | fallback error local
19
no aaa authentication login ascii-authentication
no dot1x system-auth-control
199
no feature dot1x
no feature ssh 130, 131, 143, 145, 146
no feature tacacs+ 98
no host 274, 275, 276
no ip access-list 239, 240
no ipv6 access-list 239, 240
no key chain 422
290
no mac access-list
no object-group {ip address | ipv6 address | ip port}
146
no ssh key dsa
146
no ssh key rsa
no time-range 283
no vlan access-map 299, 300
O
object-group ip address 274, 275
object-group ip port 277
object-group ipv6 address 275, 276
P
password prompt username 32
password strength-check 159, 160
periodic 281
permit 233, 234, 235, 236, 237
permit | deny 287
265
permit http-method
166, 167
permit interface
259
permit ip
259
permit udf
permit vlan 168
permit vrf 169, 170
police 475, 476, 481, 483, 484, 485
police cir 475, 476, 481, 483, 484, 485
policy-map 469
policy-map type control-plane
303, 306, 309, 310
port security
309
default settings
303
description
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
IN-4
473, 474
473, 474
473, 474
24, 25, 26
198
278
475
port security (continued)
guidelines 310
310
limitations
MAC address learning
306
MAC move
306
violations
180
ports
authorization states for 802.1X
R
12, RADIUS accounting
enabling for 802.1X authentication
radius commit 45, 51, 52, 53, 55, 56, 60, 61
radius-server deadtime
radius-server directed-request
radius-server host 33, 45, 47, 49, 54, 55, 56, 59
radius-server host accounting
radius-server host acct-port
radius-server host auth-port
radius-server host authentication
radius-server host idle-time
radius-server host password
radius-server host retransmit
radius-server host test
radius-server host timeout
radius-server host username
33, 46
radius-server key
radius-server retransmit
radius-server test {idle-time}
radius-server test {password}
radius-server test {username}
radius-server timeout
reload 241, 247, 249, 250, 258, 481, 482, 483, 484
resequence {ip | ipv6} access-list
resequence mac access-list
resequence time-range
163, 164, 165, 166, 167, 168, 169, 170
role commit
role feature-group name
163, 166, 167, 168, 169, 170
role name
96, 97
role name priv
rule {deny | permit ) command
rule {deny | permit} {read | read-write}
rule {deny | permit} {read | read-write} feature
rule {deny | permit} {read | read-write} feature-group
rule {deny | permit} {read | read-write} oid
rule {deny | permit} command
S
sak-expiry-time 509, 510
scale-factor 478, 479
secure MAC addresses
303
learning
303
180
202
202
57, 58, 59, 60
51, 52
55, 56
55, 56
55, 56
55, 56
59
59
54
59
54
59
52, 53
57, 58
57, 58
57, 58
52, 53
238
289
283
165
163
163
163
163, 164
96, 97
303
163, 164