H3C Technologies H3C S6300 Series Switches - Manual (Page 387)

372
mirror image ACLs, 223
non-mirror image ACLs, 223
packet DF bit configuration, 234
packet logging enable, 234
policy application to interface, 231
policy configuration, 225
policy configuration (IKE-based), 227
policy configuration (IKE-based/direct), 228
policy configuration (IKE-based/template), 229
policy configuration restrictions, 227
protocols and standards, 221
QoS pre-classify enable, 233
RIPng configuration, 243
SA, 219
SA negotiation failure (invalid identity info), 263
SA negotiation failure (no transform set
match), 263
security PKI configuration, 183 , 185 , 197
security protocols, 218
SNMP notification configuration, 237
source interface policy bind, 233
transform set configuration, 224
tunnel establishment, 221
tunnel for IPv4 packets configuration, 238
IPv4
security IPsec IKE-based tunnel for IPv4 packets
configuration, 241
security IPsec tunnel for IPv4 packets
configuration, 238
source guard. See IPv4 source guard
IPv4 source guard
configuration, 311 , 312 , 313 , 316
displaying, 316
dynamic binding entry, 312
dynamic configuration with DHCP relay, 319
dynamic configuration with DHCP
snooping, 318
enable on interface, 313
maintaining, 316
static binding entry, 311
static configuration, 316
static entry (global), 313
static entry (on interface), 313
IPv6
IPsec. See IPv6 IPsec
source guard. See IPv6 source guard
IPv6 IPsec
routing protocol profile, 235
routing protocols configuration, 235
IPv6 source guard
configuration, 311 , 312 , 314 , 316
displaying, 316
dynamic binding entry, 312
dynamic configuration with DHCPv6
snooping, 320
enable on interface, 314
maintaining, 316
static binding entry, 311
static configuration, 320
static entry (global), 315
static entry (on interface), 315
ISAKMP, 247 , See also IKE
security IPsec IKE configuration, 247 , 249 , 259
security IPsec IKE configuration (main
mode/pre-shared key authentication), 259
ISP
security AAA implementation, 11
security AAA ISP domain accounting methods
configuration, 45
security AAA ISP domain authentication methods
configuration, 43
security AAA ISP domain authorization
methods, 44
security AAA ISP domain creation, 42
security AAA ISP domain methods configuration, 41
security AAA ISP domain status configuration, 42
K
keepalive
security IPsec IKE function configuration, 255
security IPsec IKE NAT function configuration, 256
key
security IPsec IKE pre-shared key
authentication,
248
key pair
security SSH host key pair, 269 , 269
security SSH server key pair, 269
keychain
security IPsec IKE configuration, 253
keyword
security IPsec ACL rule keywords, 223