HP FlexNetwork 10500 Series Security Configuration Manual page 560

portal authentication extended re-DHCP
configuration, 171
F
fail-permit feature (portal),
feature compatibility
MACsec, 493
Federal Information Processing Standard.
Use FIPS
file
host public key export,
peer host public key import from file,
public key import from file,
SSH SCP file transfer+password
authentication, 406
SSH SFTP, 373
filtering
ARP packets, 445,
attack D&P blacklist,
outgoing packets filtering on portal
interface, 147
FIN flood, 476
FIPS
configuration, 458,
configuration restrictions,
display, 463
mode configuration,
mode entry, 459
mode entry (automatic reboot),
mode entry (manual reboot),
mode exit, 461
mode exit (automatic reboot),
mode exit (manual reboot),
mode system changes,
self-test, 461
self-test trigger, 463
FIPS compliance
AAA, 17
IPsec, 282
IPsec IKE, 315
password control,
PKI, 245
public key, 224
SSH, 359
SSL, 234
fixed ARP
configuration, 443
configuration restrictions,
flood attack
attack D&P defense policy,
attack D&P defense policy (ACK flood),
151
226
227
230
446
471
463
458
459
463
464
466
466
460
216
443
474
475
attack D&P defense policy (DNS flood),
attack D&P defense policy (FIN flood),
attack D&P defense policy (HTTP flood),
attack D&P defense policy (ICMP flood),
attack D&P defense policy (ICMPv6 flood),
attack D&P defense policy (RST flood),
attack D&P defense policy (SYN flood),
attack D&P defense policy (SYN-ACK flood),
attack D&P defense policy (UDP flood),
attack D&P device-preventable attacks,
forcing
portal authentication forced type,
format
802.1X EAP packet format,
802.1X EAPOL packet format,
802.1X packet,
AAA HWTACACS username,
AAA RADIUS packet format,
AAA RADIUS username,
MAC authentication user account,
forwarding
ARP restricted forwarding,
IP source guard (IPSG)
configuration, 418, 419,
IPv4 source guard (IPv4SG) dynamic binding
configuration, 424
IPv4 source guard (IPv4SG) dynamic
binding+DHCP relay configuration,
IPv4 source guard (IPv4SG) static binding
configuration, 423
IPv6 source guard (IPv6SG) dynamic
binding+DHCPv6 snooping configuration,
IPv6 source guard (IPv6SG) static binding
configuration, 426
ND attack defense configuration,
RA guard, 518
fragment
attack D&P TCP fragment attack prevention,
IPsec packet DF bit,
frame
port security configuration, 192,
FTP
AAA RADIUS Login-Service attribute check
method, 32
local host public key distribution,
SSH SCP configuration,
SSH SCP server connection establishment,
SSH SCP server connection establishment based
on Suite B, 377
SSH SFTP client device,
SSH SFTP client publickey authentication,
546
134
69
70
69
36
3
27
119
439
423
425
514
297
195
226
406
369
478
476
478
477
477
476
475
475
477
470
427
481
374
399