HP 6125XLG Configuration Manual page 260

exchange, 222
keychain, 225
main mode configuration,
main mode in phase 1,
maintaining, 232
negotiation failure (no proposal or keychain
referenced correctly),
negotiation failure troubleshooting (no proposal
match), 235
negotiation process,
PFS, 224
pre-shared key authentication,
profile, 225
SA, 200
SA lifetime, 227
security mechanism,
troubleshooting, 235
IKE-based IPsec policy
configuring by referencing IPsec policy
template, 209
direct configuration,
IMC
RADIUS session-control feature
configuration, 44
implementing
802.1X HP MAC-based access control,
802.1X HP port-based access control,
AAA for MPLS L3VPNs,
AAA HWTACACS,
AAA LDAP, 9
AAA on device, 1 1
AAA RADIUS, 2
ACL-based IPsec,
IPsec, 201
importing
peer host public key from file,
public key from file,
initiating
802.1X authentication, 62,
Internet Key Exchange. See
intrusion protection
blockmac mode,
disableport mode,
disableport-temporarily mode,
port security feature,
232
222
236
222
223
223
208
68
13
7
202
1 19
122
63
IKE
93
93
93
87
IP
uRPF configuration, 186, 189,
IP addressing
ARP attack protection configuration,
ARP filtering configuration,
ARP gateway protection,
ARP user/packet validity check,
LDAP server IP address configuration,
outgoing RADIUS packet source IP address,
RADIUS security policy server IP address
configuration,
security AAA HWTACACS outgoing packet source
IP address,
SFTP client source IP address or interface
specification,
Stelnet client source IP address,
IP source guard
configuration, 161,
displaying,
IPv4 configuration,
IPv4 dynamic configuration with DHCP relay,
IPv4 dynamic configuration with DHCP
snooping,
IPv4 on interface,
IPv4 static configuration,
68 IPv4 static entry on interface,
IPv6 configuration,
IPv6 on interface,
IPv6 static configuration,
IPv6 static entry on interface,
maintaining,
static binding entries,
ip validity check (ARP),
IPsec
ACL-based IPsec,
applying IPsec policy,
authentication,
binding source interface to IPsec policy,
configuration,
configuring ACL,
configuring anti-replay,
configuring DF bit of IPsec packets,
configuring IKE profile,
configuring IKE proposal,
configuring IKE-based policy,
251
190
184
183
180
30
34
135
133
162
165
162
167
162
165
163
164
164
170
164
165
161
178
201
21 1
200
198
203
212
225
227
207
171
37
27
169
213
214