H3C Technologies H3C S6300 Series Switches - Manual (Page 391)

376
port security intrusion protection
configuration, 149
port security MAC address learning control, 145
port security mode, 143 , 148
port security NTK configuration, 149
port security secure MAC address
configuration, 150
port security secure MAC address port limit, 147
portal authentication client, 90
security 802.1X access control method, 72
security 802.1X architecture, 62
security 802.1X authentication request max
number attempts, 73
security 802.1X authentication server timeout
timer, 73
security 802.1X authentication trigger
function,
74
security 802.1X authorization state, 72
security 802.1X EAP relay authentication, 67
security 802.1X EAP relay enable, 71
security 802.1X EAP termination enable, 71
security 802.1X online user handshake
function, 74
security 802.1X periodic online user
re-authentication,
76
security 802.1X port max number users, 72
security AAA device implementation, 11
security AAA HWTACACS implementation, 7
security AAA HWTACACS scheme
configuration, 32
security AAA ISP domain accounting methods
configuration, 45
security AAA ISP domain authentication
methods configuration,
43
security AAA ISP domain authorization
methods,
44
security AAA ISP domain creation, 42
security AAA ISP domain methods
configuration, 41
security AAA ISP domain status
configuration,
42
security AAA LDAP implementation, 9
security AAA LDAP scheme configuration, 38
security AAA local user configuration, 18
security AAA RADIUS implementation, 2
security AAA RADIUS scheme configuration, 22
security AAA scheme configuration, 18
security ARP active acknowledgement, 328
security ARP attack protection (unresolvable IP
attack),
322
security ARP blackhole routing, 323
security ARP detection configuration, 329
security ARP filtering, 335 , 336
security ARP gateway protection, 334 , 335
security ARP packet rate limit configuration, 325
security ARP packet source MAC consistency
check, 328
security ARP packet validity check, 330
security ARP restricted forwarding, 331
security ARP scanning, 333
security ARP source MAC-based attack
detection, 326 , 327
security ARP source suppression, 323
security ARP unresolvable IP attack protection, 324
security ARP user validity check, 329
security ARP user/packet validity check, 332
security authorized ARP configuration, 329
security fixed ARP configuration, 333
security IP source guard dynamic binding entry, 312
security IP source guard static binding entry, 311
security IPsec ACL configuration, 223
security IPsec ACL de-encapsulated packet
check,
231
security IPsec ACL-based implementation, 221 , 222
security IPsec anti-replay configuration, 232
security IPsec application-based
implementation,
221
security IPsec IKE SNMP notification, 258
security IPsec implementation, 220
security IPsec IPv6 routing protocol profile, 235
security IPsec IPv6 routing protocols, 235
security IPsec packet DF bit, 234
security IPsec packet logging enable, 234
security IPsec policy application to interface, 231
security IPsec policy configuration, 225
security IPsec policy configuration (IKE-based), 227
security IPsec policy configuration
(IKE-based/direct),
228
security IPsec policy configuration
(IKE-based/template), 229
security IPsec QoS pre-classify enable, 233
security IPsec SNMP notification, 237