Dell POWEREDGE M1000E - Manual (Page 648)

648 Fabric OS Administrator’s Guide
53-1002745-02
policy rules , 219
policy rules using service names , 220
saving policy , 218
supported actions , 221
supported protocols , 221
supported services and port numbers , 220
IP interface for chassis management , 65
IP sec
algorithms , 234
Authentication Header protocol , 233
configuration on the management interface , 231
Encapsulating Security Payload protocol , 233
flushing security associations , 240
IKE policies , 235
key management , 235
manual key entry , 236
null encryption support for IKE policies , 240
policies , 234 – 240
policy described , 234
pre-shared key , 235
protocol, described , 177
protocols , 233
sa-proposal , 234
security association , 233
security certificate , 236
traffic selector , 235
transform set , 235
tunnel configurations , 231 – 233
IP secConfig command , 231 , 236 , 238 , 239
ipAddrSet command , 65 , 66 , 67 , 223 , 298
ipAddrShow command , 63 , 67
ipFilter command , 190 , 191 , 218 , 219 , 223 , 224 , 623
IP-NAT , 113
IPSECCA.pem, certificate name , 236
ipSecConfig command , 234 , 624
IPv4 filter policy address , 220
IPv6
autoconfiguration , 68
DHCP and stateful IPv6 addresses , 66
filter policy address , 220
IPv6 policies tunneling IMCP traffic , 240
ISL , 78
best practices , 114
configuring extended , 553
fabric parameters , 114
logical fabrics and , 282
maximum distances in LO mode , 78
ISL R_RDY mode , 117
ISL trunking
disabling , 538
enabling , 538
over long distance fabrics , 540
islShow command , 400 , 524 , 538
J
Java
installing root certificate in plugin , 187
installing root certificate to plugin , 187
support for SSL , 182
supported version , 183
Java plugin, installing root certificate for , 187
joining a switch to a fabric , 229
K
key
adding public key to switch , 180
deleting private from switch , 182
deleting public from switch , 182
generating for FCAP , 215
generation , 183
key management and IP sec , 235
key pair generation for RSA or DSA , 180
manual key entry and IP sec , 236
PKI key pair generation on switch , 181
pre-shared, and IP sec , 235
private key generation , 183
secret pairs for DH-CHAP , 213
setting a secret key pair , 214
viewing list of secret key pairs , 213
key entry limitations, for encryption , 395
key generation , 398
keys, expiry , 396
keyTool command , 187
killTelnet command , 57
L
L_Port, described , 84
latency bottleneck type , 376
Layer 2 routing. See also: FSPF.
LDAP
Active Directory LDAP versions supported , 163
authentication, non-FIPS mode , 166
certificates for FIPS mode , 620
configuring for Microsoft Active Directory , 163
creating Fabric OS user accounts , 153
deleting certificates , 621
exporting certificates , 621