H3C Technologies H3C S6300 Series Switches - Manual (Page 388)

373
L
LAN
security 802.1X overview, 62
Layer 2
security MFF configuration, 338 , 340 , 342
security MFF manual-mode in ring network, 343
security MFF manual-mode in tree network, 342
Layer 3
security IPsec configuration, 217 , 238
security IPsec IKE-based tunnel for IPv4 packets
configuration, 241
security IPsec RIPng configuration, 243
security IPsec tunnel for IPv4 packets
configuration,
238
LDAP
AAA configuration, 16
AAA implementation, 9
AAA local user configuration, 18
AAA scheme configuration, 18
administrator attribute configuration, 39
authentication, 9
authentication server specification, 41
authorization, 9
directory service, 9
displaying, 41
packet exchange process, 10
protocols and standards, 13
scheme configuration, 38
scheme creation, 41
security AAA configuration, 1 , 47
server creation, 38
server IP address configuration, 39
server SSH user authentication, 54
server timeout period, 39
troubleshooting, 60
user attribute configuration, 40
version specification, 39
Lightweight Directory Access Protocol. Use LDAP
limiting
port security secure MAC addresses, 147
security ARP packet rate limit configuration, 325
local
security AAA local accounting method, 12
security AAA local authentication, 12
security AAA local authentication configuration, 16
security AAA local authorization method, 12
security AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, 49
security host public key display, 176 , 176
security host public key distribution, 175
security host public key export to file, 175
security host public key save to file, 176
security key pair creation, 174
security key pair destruction, 177
security MAC authentication, 80
security MAC local authentication configuration, 85
security password control local user
parameters, 168
security PKI digital certificate, 183
troubleshooting PKI certificate obtain failure, 212
troubleshooting PKI certificate request failure, 213
troubleshooting PKI local certificate import
failure,
214
logging
security IPsec packet logging enable, 234
security password events, 165
logging in
RADIUS Login-Service attribute, 31
security AAA max concurrent logins, 47
logging out portal users, 107
login
security password expired login, 163
security password user first login, 164
security password user login attempt limit, 164
security password user login control, 164
M
MAC
address. See MAC address
authentication. See MAC authentication
security SSL services, 306
MAC address
MAC local authentication configuration, 85
RADIUS-based MAC authentication
configuration,
86
security 802.1X authentication (access device
initiated), 65
security 802.1X authentication (client-initiated), 65
security IP source guard configuration, 311 , 312