HPE 704654-B21 Manuals

Manuals and User Guides for HPE 704654-B21. We have 1 HPE 704654-B21 manual available for free PDF download: Security Configuration Manual

HPE 704654-B21 Security Configuration Manual

HPE 704654-B21 Security Configuration Manual (540 pages)

Switch Module

Brand: HPE | Category: Control Unit | Size: 5 MB

Table of Contents

Table of Contents
3
Configuring AAA

14
802.1X Overview

77
- 802.1X Architecture
  77
- Controlled/Uncontrolled Port and Port Authorization Status
  77
- 802.1X-Related Protocols
  78
  - Packet Formats
    78
  - EAP over RADIUS
    79
- 802.1X Authentication Initiation
  80
  - 802.1X Client as the Initiator
    80
  - Access Device as the Initiator
    80
- 802.1X Authentication Procedures
  81
  - Comparing EAP Relay and EAP Termination
    81
  - EAP Relay
    82
  - EAP Termination
    83
Configuring 802.1X

85
Configuring MAC Authentication

116
Configuring Portal Authentication

136
Configuring Port Security

198
- Overview
  198
  - Port Security Features
    198
  - Port Security Modes
    198
- Configuration Task List
  201
- Enabling Port Security
  201
- Setting Port Security's Limit on the Number of Secure MAC Addresses on a Port
  202
- Setting the Port Security Mode
  202
- Configuring Port Security Features
  203
  - Configuring NTK
    203
  - Configuring Intrusion Protection
    204
- Configuring Secure MAC Addresses
  204
  - Configuration Prerequisites
    205
  - Configuration Procedure
    205
- Ignoring Authorization Information from the Server
  206
- Enabling MAC Move
  206
- Applying NAS-ID Profile to Port Security
  207
- Enabling the Authorization-Fail-Offline Feature
  207
- Displaying and Maintaining Port Security
  208
- Port Security Configuration Examples
  208
- Troubleshooting Port Security
  216
  - Cannot Set the Port Security Mode
    216
  - Cannot Configure Secure MAC Addresses
    217
Configuring Password Control

218
- Overview
  218
  - Password Setting
    218
  - Password Updating and Expiration
    219
  - User Login Control
    220
  - Password Not Displayed in any Form
    220
  - Logging
    220
- FIPS Compliance
  221
- Password Control Configuration Task List
  221
- Enabling Password Control
  221
- Setting Global Password Control Parameters
  222
- Setting User Group Password Control Parameters
  223
- Setting Local User Password Control Parameters
  224
- Setting Super Password Control Parameters
  224
- Displaying and Maintaining Password Control
  225
- Password Control Configuration Example
  225
  - Network Requirements
    225
  - Configuration Procedure
    226
  - Verifying the Configuration
    227
Managing Public Keys

229
- Overview
  229
- FIPS Compliance
  229
- Creating a Local Key Pair
  229
- Distributing a Local Host Public Key
  231
  - Exporting a Host Public Key
    231
  - Displaying a Host Public Key
    231
- Destroying a Local Key Pair
  232
- Configuring a Peer Host Public Key
  232
  - Importing a Peer Host Public Key from a Public Key File
    232
  - Entering a Peer Host Public Key
    232
- Displaying and Maintaining Public Keys
  233
- Examples of Public Key Management
  233
  - Example for Entering a Peer Host Public Key
    233
  - Example for Importing a Public Key from a Public Key File
    235
Configuring PKI

238
- Overview
  238
  - PKI Terminology
    238
  - PKI Architecture
    239
  - PKI Operation
    239
  - PKI Applications
    240
  - Support for MPLS L3VPN
    240
- FIPS Compliance
  241
- PKI Configuration Task List
  241
- Configuring a PKI Entity
  241
- Configuring a PKI Domain
  242
- Requesting a Certificate
  244
- Aborting a Certificate Request
  246
- Obtaining Certificates
  246
  - Configuration Prerequisites
    246
  - Configuration Guidelines
    246
  - Configuration Procedure
    247
- Verifying PKI Certificates
  247
  - Verifying Certificates with CRL Checking
    247
  - Verifying Certificates Without CRL Checking
    248
- Specifying the Storage Path for the Certificates and Crls
  248
- Exporting Certificates
  249
- Removing a Certificate
  249
- Configuring a Certificate-Based Access Control Policy
  250
- Displaying and Maintaining PKI
  251
- PKI Configuration Examples
  251
- Troubleshooting PKI Configuration
  265
  - Failed to Obtain the CA Certificate
    266
  - Failed to Obtain Local Certificates
    266
  - Failed to Request Local Certificates
    267
  - Failed to Obtain Crls
    267
  - Failed to Import the CA Certificate
    268
  - Failed to Import a Local Certificate
    269
  - Failed to Export Certificates
    269
  - Failed to Set the Storage Path
    270
Configuring Ipsec

271
- Overview
  271
  - Security Protocols and Encapsulation Modes
    271
  - Security Association
    273
  - Authentication and Encryption
    273
  - Ipsec Implementation
    274
  - Protocols and Standards
    275
- FIPS Compliance
  275
- Ipsec Tunnel Establishment
  275
- Implementing ACL-Based Ipsec
  276
- Configuring Ipsec for Ipv6 Routing Protocols
  289
  - Configuration Task List
    289
  - Configuring a Manual Ipsec Profile
    289
- Configuring SNMP Notifications for Ipsec
  290
- Displaying and Maintaining Ipsec
  291
- Ipsec Configuration Examples
  292
Configuring IKE

301
Configuring Ikev2

319
Configuring SSH

338
Configuring SSL

398
- Overview
  398
  - SSL Security Services
    398
  - SSL Protocol Stack
    398
- FIPS Compliance
  399
- SSL Configuration Task List
  399
- Configuring an SSL Server Policy
  399
- Configuring an SSL Client Policy
  401
- Displaying and Maintaining SSL
  403
Configuring IP Source Guard

404
- Overview
  404
  - Static IPSG Bindings
    404
  - Dynamic IPSG Bindings
    405
- IPSG Configuration Task List
  405
- Configuring the Ipv4Sg Feature
  406
  - Enabling Ipv4Sg on an Interface
    406
  - Configuring a Static Ipv4Sg Binding
    406
- Configuring the Ipv6Sg Feature
  407
  - Enabling Ipv6Sg on an Interface
    407
  - Configuring a Static Ipv6Sg Binding
    408
- Displaying and Maintaining IPSG
  409
- IPSG Configuration Examples
  409
Configuring ARP Attack Protection

415
Configuring MFF

436
- Overview
  436
  - Basic Concepts
    437
  - MFF Operation Modes
    437
  - MFF Working Mechanism
    438
  - Protocols and Standards
    438
- Configuring MFF
  438
  - Enabling MFF
    438
  - Configuring a Network Port
    438
  - Enabling Periodic Gateway Probe
    439
  - Specifying the IP Addresses of Servers
    439
- Displaying and Maintaining MFF
  440
- MFF Configuration Examples
  440
  - Manual-Mode MFF Configuration Example in a Tree Network
    440
  - Manual-Mode MFF Configuration Example in a Ring Network
    441
Configuring Urpf

443
- Overview
  443
  - Urpf Check Modes
    443
  - Urpf Operation
    443
  - Network Application
    446
- Configuring Urpf
  446
- Displaying and Maintaining Urpf
  446
- Urpf Configuration Example
  447
Configuring Crypto Engines

448
- Overview
  448
- Displaying and Maintaining Crypto Engines
  448
Configuring FIPS

449
- Overview
  449
- Configuration Restrictions and Guidelines
  449
- Configuring FIPS Mode
  450
  - Entering FIPS Mode
    450
  - Configuration Changes in FIPS Mode
    451
  - Exiting FIPS Mode
    452
- FIPS Self-Tests
  452
  - Power-Up Self-Tests
    453
  - Conditional Self-Tests
    453
  - Triggering Self-Tests
    454
- Displaying and Maintaining FIPS
  454
- FIPS Configuration Examples
  454
Configuring User Profiles

459
Configuring Attack Detection and Prevention

465
Configuring ND Attack Defense

482
- Overview
  482
- Configuring Source MAC Consistency Check for ND Packets
  482
Configuring Keychains

483
- Overview
  483
- Configuration Procedure
  483
- Displaying and Maintaining Keychain
  484
- Keychain Configuration Example
  484
  - Network Requirements
    484
  - Configuration Procedure
    484
  - Verifying the Configuration
    486
Document Conventions and Icons

489
- Conventions
  489
- Network Topology Icons
  490
Support and Other Resources

491
- Accessing Hewlett Packard Enterprise Support
  491
- Accessing Updates
  491
  - Websites
    492
  - Customer Self Repair
    492
  - Remote Support
    492
  - Documentation Feedback
    492
Index

494

Advertisement

Advertisement

Related Products

HPE Categories

Switch

Network Router

Storage

Storage Wireless Access Point

More HPE Manuals