H3C Technologies H3C S6300 Series Switches - Manual (Page 375)

360
algorithm
security IPsec authentication, 220
security IPsec encryption (3DES), 220
security IPsec encryption (AES), 220
security IPsec encryption (DES), 220
security IPsec IKE DH algorithm, 249
security SSH negotiation, 267
anti-replay (IPsec), 232
any authentication (SSH), 267
application
security IPsec application-based
implementation, 221
security IPsec application-based tunnel
establishment, 221
applying
security IPsec policy to interface, 231
architecture
security 802.1X, 62
security PKI, 184
ARP
attack protection. See ARP attack protection
security MFF configuration, 338 , 340 , 342
security MFF manual-mode in ring network, 343
security MFF manual-mode in tree network, 342
ARP attack protection
active acknowledgement, 328
authorized ARP configuration, 329
blackhole routing, 323
configuration, 322
detection configuration, 329
displaying ARP detection, 331
displaying unresolvable IP attack
protection, 324
filtering configuration, 335 , 336
fixed ARP configuration, 333
gateway protection, 334 , 335
maintaining ARP detection, 331
packet rate limit configuration, 325
packet source MAC consistency check, 328
packet validity check configuration, 330
restricted forwarding, 331
scanning configuration, 333
source MAC-based attack detection, 326 , 327
source MAC-based detection display, 327
source suppression, 323
unresolvable IP attack, 322
unresolvable IP attack protection, 324
user validity check, 329
user/packet validity check, 332
ARP detection
security IP source guard static binding entry, 311
associating
security IPsec SA, 219
attribute
AAA RADIUS Login-Service attribute check
method,
31
security 802.1X RADIUS EAP-Message, 65
security 802.1X RADIUS
Message-Authentication, 65
security AAA HWTACACS scheme
configuration, 32
security AAA LDAP administrator attribute
configuration,
39
security AAA LDAP scheme configuration, 38
security AAA LDAP user attribute configuration, 40
security AAA local user attribute configuration, 19
security AAA local user configuration, 18
security AAA RADIUS, 13
security AAA RADIUS common standard
attributes, 13
security AAA RADIUS extended attributes, 6
security AAA RADIUS H3C proprietary
attributes,
15
security AAA RADIUS scheme configuration, 22
security AAA scheme configuration, 18
security AAA user group attribute configuration, 21
authenticating
port security authentication modes, 143
port security client macAddressElseUserLoginSecure
configuration, 157
port security client userLoginWithOUI
configuration, 154
port security configuration, 143 , 146 , 153
port security MAC address autoLearn mode
configuration, 153
security 802.1X access device initiated
authentication, 65
security 802.1X authentication, 66
security 802.1X authentication request max number
attempts,
73
security 802.1X authentication trigger function, 74