H3C Technologies H3C S6300 Series Switches - Manual (Page 376)

361
security 802.1X client-initiated, 65
security 802.1X EAP over RADIUS, 64
security 802.1X EAP relay authentication, 67
security 802.1X EAP relay enable, 71
security 802.1X EAP relay/termination
mode,
66
security 802.1X EAP termination, 68
security 802.1X EAP termination enable, 71
security 802.1X initiation, 65
security 802.1X mandatory port authentication
domain, 75
security 802.1X periodic online user
re-authentication, 76
security 802.1X RADIUS
Message-Authentication attribute, 65
security 802.1X timeout timers, 73
security AAA configuration, 1 , 16 , 47
security AAA ISP domain authentication
methods configuration, 43
security AAA LDAP authentication, 9
security AAA LDAP server SSH user
authentication, 54
security AAA RADIUS server SSH user
authentication+authorization, 51
security AAA RADIUS user authentication
methods, 3
security AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, 49
security IPsec, 220
security IPsec authentication algorithms, 220
security IPsec Authentication Header. Use AH
security IPsec configuration, 217 , 238
security IPsec Encapsulating Security Payload.
Use ESP
security IPsec IKE configuration (main
mode/pre-shared key authentication), 259
security IPsec IKE DSA signature
authentication,
248
security IPsec IKE pre-shared key
authentication, 248
security IPsec IKE RSA signature
authentication, 248
security IPsec IKE-based tunnel for IPv4 packets
configuration, 241
security IPsec RIPng configuration, 243
security IPsec tunnel for IPv4 packets
configuration, 238
security MAC authentication, 80
security MAC authentication configuration, 81 , 85
security MAC local authentication configuration, 85
security password control
configuration, 162 , 165 , 170
security RADIUS-based MAC authentication
configuration, 86
security SSH configuration, 266
security SSH methods, 267
security SSH server configuration, 269
security SSH SFTP client publickey
authentication, 298
security SSH SFTP server password
authentication, 296
security SSH Stelnet client password authentication
configuration, 291
security SSH Stelnet client publickey
authentication,
294
security SSH Stelnet server password
authentication,
283
security SSH Stelnet server publickey
authentication, 286
security SSL services, 306
authentication
configuring BAS-IP for unsolicited portal packets
sent to portal authentication server, 105
configuring cross-subnet portal, 119
configuring destination subnet (portal), 100
configuring direct portal, 107
configuring extended direct portal, 122
configuring extended re-DHCP portal, 125
configuring online detection of portal users, 102
configuring portal authentication server, 95
configuring portal authentication server
detection, 102
configuring portal detection functions, 102
configuring portal fail-permit, 105
configuring portal user synchronization, 104
configuring portal Web server, 96
configuring portal Web server detection, 103
configuring portal-free rule, 98
configuring re-DHCP portal, 116
configuring source subnet (portal), 99
controlling portal user access, 98