H3C Technologies H3C S6300 Series Switches - Manual (Page 411)

396
security AAA HWTACACS server response
timeout timer, 36
security AAA RADIUS real-time accounting, 29
security AAA RADIUS server quiet, 29
security AAA RADIUS server response
timeout, 29
security MAC authentication offline detect timer
configuration, 83
security MAC authentication quiet timer
configuration, 83
security MAC authentication server timeout
timer configuration, 83
topology
security MFF manual-mode in ring network, 343
security MFF manual-mode in tree network, 342
traffic
security AAA HWTACACS traffic statistics
units, 35
security AAA RADIUS traffic statistics units, 25
security IPsec configuration, 217 , 238
security IPsec IKE negotiation (traffic-based
lifetime), 219
security IPsec IKE-based tunnel for IPv4 packets
configuration,
241
security IPsec RIPng configuration, 243
security IPsec tunnel for IPv4 packets
configuration, 238
traffic monitoring
security MFF configuration, 338 , 340 , 342
security MFF manual-mode in ring network, 343
security MFF manual-mode in tree network, 342
transform set (IPsec), 224
Transmission Control Protocol. Use TCP
transporting
security IPsec encapsulation transport
mode, 218
triggered self-test, 353
troubleshooting
cannot log out portal users on access
device, 140
cannot log out portal users on RADIUS
server,
141
no portal authentication page is pushed for
users, 140
port security, 160
port security mode cannot be set, 160
port security secure MAC addresses, 161
portal, 140
Re-DHCP portal authenticated users cannot log
in,
142
security AAA HWTACACS, 60
security AAA LDAP, 60
security AAA RADIUS, 59
security AAA RADIUS accounting error, 60
security AAA RADIUS authentication failure, 59
security AAA RADIUS packet delivery failure, 59
security IPsec IKE, 261
security IPsec IKE negotiation failure (no proposal
match), 261
security IPsec IKE negotiation failure (no proposal or
keychain referenced correctly), 262
security IPsec SA negotiation failure (invalid identity
info), 263
security IPsec SA negotiation failure (no transform
set match), 263
security PKI CA certificate import failure, 214
security PKI CA certificate obtain failure, 211
security PKI certificate export failure, 215
security PKI configuration, 211
security PKI CRL obtain failure, 213
security PKI local certificate import failure, 214
security PKI local certificate obtain failure, 212
security PKI local certificate request failure, 213
security PKI storage path set failure, 215
users logged out by access device still exist on
portal authentication server, 141
tunneling
security IPsec configuration, 217 , 238
security IPsec encapsulation tunnel mode, 218
security IPsec IKE-based tunnel for IPv4 packets
configuration, 241
security IPsec RIPng configuration, 243
security IPsec tunnel establishment, 221
security IPsec tunnel for IPv4 packets
configuration, 238
U
UDP
security AAA RADIUS implementation, 2
security AAA RADIUS max request transmission
attempts, 26
security AAA RADIUS packet format, 4