H3C Technologies H3C S6300 Series Switches - Manual (Page 394)

379
security 802.1X format, 63
security AAA HWTACACS outgoing packet
source IP address, 35
security AAA HWTACACS packet exchange
process, 7
security AAA LDAP packet exchange
process,
10
security AAA RADIUS outgoing packet source IP
address, 28
security AAA RADIUS packet exchange
process, 3
security AAA RADIUS packet format, 4
security ARP active acknowledgement, 328
security ARP attack protection (unresolvable IP
attack), 322
security ARP filtering, 335 , 336
security ARP packet rate limit configuration, 325
security ARP packet source MAC consistency
check, 328
security ARP packet validity check, 330
security ARP user/packet validity check, 332
security IPsec ACL de-encapsulated packet
check, 231
security IPsec anti-replay configuration, 232
security IPsec implementation, 220
security IPsec packet DF bit configuration, 234
security IPsec packet logging enable, 234
security IPsec QoS pre-classify enable, 233
packet filtering
IP source guard configuration, 316
security IP source guard configuration, 311 , 312
security IP source guard dynamic binding
entry, 312
security IP source guard static binding entry, 311
security IPv4 source guard dynamic
configuration with DHCP relay, 319
security IPv4 source guard dynamic
configuration with DHCP snooping,
318
security IPv4 source guard static
configuration, 316
security IPv6 source guard dynamic
configuration with DHCPv6 snooping, 320
security IPv6 source guard static
configuration, 320
parameter
security AAA RADIUS accounting server
parameters specification, 24
security password control global parameters, 166
security password control local user
parameters, 168
security password control user group
parameters, 167
security super password control parameters, 169
setting SSH management parameters, 274
password
security SSH password authentication, 267
security SSH password-publickey
authentication, 267
security SSH SFTP server password
authentication,
296
security SSH Stelnet client password
authentication,
291
security SSH Stelnet server password
authentication, 283
password control
configuration, 162 , 165 , 170
displaying, 169
enable, 165
event logging, 165
expired password login, 163
FIPS compliance, 165
global parameters, 166
local user parameters, 168
maintaining, 169
max user account idle time, 164
password complexity checking, 163
password composition checking, 162
password expiration, 163 , 163
password history, 164
password minimum length, 162
password not displayed, 164
password setting, 162
password updating, 163 , 163
super parameters, 169
user first login, 164
user group parameters, 167
user login attempt limit, 164
user login control, 164
path
troubleshooting PKI storage path set failure, 215
peer
security IPsec implementation, 220
security IPsec SA, 219