HP 3600 v2 Series Configuration Manual page 7

Using triple authentication with other features ································································································· 188
Configuring triple authentication ································································································································ 188
Triple authentication configuration examples ··········································································································· 189
Triple authentication basic function configuration example ··········································································· 189
Triple authentication supporting VLAN assignment and Auth-Fail VLAN configuration example ·············· 191
Configuring port security ········································································································································ 197
Overview ······································································································································································· 197
Port security features ··········································································································································· 197
Port security modes ············································································································································· 198
Working with guest VLAN and Auth-Fail VLAN ······························································································ 200
Configuration task list ·················································································································································· 200
Enabling port security ·················································································································································· 201
Setting port security's limit on the number of MAC addresses on a port······························································· 201
Setting the port security mode ···································································································································· 202
Configuration prerequisites ································································································································ 202
Configuration procedure ···································································································································· 202
Configuring port security features ······························································································································ 203
Configuring NTK ················································································································································· 203
Configuring intrusion protection ························································································································ 203
Enabling port security traps ································································································································ 204
Configuring secure MAC addresses ·························································································································· 204
Configuration prerequisites ································································································································ 205
Configuration procedure ···································································································································· 205
Ignoring authorization information ···························································································································· 206
Displaying and maintaining port security ·················································································································· 207
Port security configuration examples ························································································································· 207
Configuring the autoLearn mode ······················································································································· 207
Configuring the userLoginWithOUI mode ········································································································ 210
Configuring the macAddressElseUserLoginSecure mode ················································································ 214
Troubleshooting port security ······································································································································ 217
Cannot set the port security mode ····················································································································· 217
Cannot configure secure MAC addresses ········································································································ 217
Cannot change port security mode when a user is online ·············································································· 218
Configuring a user profile ······································································································································ 219
Overview ······································································································································································· 219
User profile configuration task list ······························································································································ 219
Creating a user profile ················································································································································ 219
Applying a QoS policy ··············································································································································· 220
Enabling a user profile ················································································································································ 220
Displaying and maintaining user profiles ·················································································································· 221
Configuring password control ································································································································ 222
Overview ······································································································································································· 222
FIPS compliance ··························································································································································· 224
Password control configuration task list ····················································································································· 225
Configuring password control ···································································································································· 225
Enabling password control ································································································································· 225
Setting global password control parameters ···································································································· 226
Setting user group password control parameters ···························································································· 228
Setting local user password control parameters ······························································································ 228
Setting super password control parameters ····································································································· 229
Setting a local user password in interactive mode ·························································································· 229
Displaying and maintaining password control ········································································································· 230
Password control configuration example ·················································································································· 230
v