HP Switch 6120 Manual de usuario Pagina 10
- Pagina / 469
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
ix
7 Configuring Secure Socket Layer (SSL)
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-3
Prerequisite for Using SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
Steps for Configuring and Using SSL for Switch and Client
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-6
Configuring the Switch for SSL Operation . . . . . . . . . . . . . . . . . . . . . . 7-7
1. Assigning a Local Login (Operator) and
Enabling (Manager) Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-7
2. Generating the Switch’s Server Host Certificate . . . . . . . . . . . . . . . . 7-8
To Generate or Erase the Switch’s Server Certificate
with the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-9
Comments on Certificate Fields. . . . . . . . . . . . . . . . . . . . . . . . . . . 7-10
Generate a Self-Signed Host Certificate with the Web browser
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-12
Generate a CA-Signed server host certificate with the
Web browser interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-15
3. Enabling SSL on the Switch and Anticipating SSL
Browser Contact Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-17
Using the CLI Interface to Enable SSL . . . . . . . . . . . . . . . . . . . . . 7-19
Using the Web Browser Interface to Enable SSL . . . . . . . . . . . . . 7-19
Common Errors in SSL setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-21
8 Configuring Advanced Threat Protection
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3
DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
Enabling DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-5
Enabling DHCP Snooping on VLANS . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-7
Configuring DHCP Snooping Trusted Ports . . . . . . . . . . . . . . . . . . . . . 8-8
Configuring Authorized Server Addresses . . . . . . . . . . . . . . . . . . . . . . . 8-9
- Access Security Guide 1
- Hewlett-Packard Company 2
- 3 Web and MAC Authentication 6
- 4 TACACS+ Authentication 7
- 10 Configuring Port-Based and 12
- Product Documentation 18
- Software Feature Index 19
- Intelligent Edge Software 20
- Features 20
- Security Overview 23
- Introduction 24
- Access Security Features 25
- Network Security Features 29
- Physical Security 31
- SNMP Security Guidelines 37
- Dynamic Configuration Arbiter 39
- Network Immunity Manager 40
- (IDM) 43
- Menu: Setting Passwords 49
- Security tab 52
- [Device Passwords] 52
- [Apply Changes] 52
- Credentials 54
- Password Command Options 55
- SNMP Security Credentials 56
- Restrictions 64
- Front-Panel Security 66
- Front-Panel Button Functions 67
- Clear Button 68
- Reset Button 68
- ResetClear 69
- Password Recovery 75
- [Y] (for “Yes”) 76
- [N] (for “No”) 76
- Password Recovery Process 77
- MAC Authentication 81
- RADIUS-Based Authentication 83
- Wireless Clients 83
- Web-based Authentication 84
- MAC-based Authentication 86
- Operating Rules and Notes 89
- Setup Procedure for Web/MAC 91
- Web and MAC Authentication 100
- ProCurve Switch (config)# 103
- Files (Optional) 111
- Customizing HTML Templates 112
- Customizable HTML Templates 113
- Overview 127
- Client Status 137
- TACACS+ Authentication 138
- Terminology Used in TACACS 140
- Applications: 140
- General System Requirements 142
- Note on 144
- Privilege Levels 144
- Before You Begin 145
- Configuration 146
- Server Contact Configuration 147
- Authentication Parameters 149
- Caution Regarding 153
- Login Primary 153
- Encryption Keys 156
- First-Choice TACACS+ Server 158
- write mem) 160
- How Authentication Operates 161
- Local Authentication Process 163
- Using the Encryption Key 164
- Access When Using TACACS+ 165
- Authentication 165
- Messages Related to TACACS+ 166
- Operation 166
- Operating Notes 166
- Accounting 168
- Contents 169
- Accounting Services 171
- Configuration MIB 171
- Terminology 172
- You Want RADIUS To Protect 177
- (hpSwitchAuth) is disabled 190
- Commands Authorization 193
- Enabling Authorization 194
- Additional RADIUS Attributes 203
- Configuring RADIUS Accounting 204
- Interim Updating Options 211
- Viewing RADIUS Statistics 213
- RADIUS Accounting Statistics 216
- as both the primary 220
- Prerequisite for Using SSH 225
- Public Key Formats 225
- Enable (Manager) Password 230
- Host Public 232
- Key for the 232
- Configuring Key Lengths 233
- Client Contact Behavior 235
- ■ Execute no ip ssh 237
- Note on Port 239
- Public-Key Authentication 244
- Bit Size Exponent <e> 246
- Modulus <n> 246
- Note on Public 247
- Key Index Number 249
- Logging Messages 251
- Debug Logging 252
- Prerequisite for Using SSL 257
- Password Button 260
- Security Tab 260
- Generate New Key 263
- Enter certificate Arguments 263
- Generate New Certificate 263
- Show host certificate command 264
- [SSL] button 266
- Web browser interface 267
- Browser Contact Behavior 269
- Common Errors in SSL setup 273
- DHCP Snooping 277
- Enabling DHCP Snooping 278
- The DHCP Binding Database 285
- Enabling Debug Logging 286
- Operational Notes 286
- Log Messages 287
- Dynamic ARP Protection 289
- Configuring Trusted Ports 291
- Dynamic IP Lockdown 296
- Prerequisite: DHCP Snooping 297
- Enabling Dynamic IP Lockdown 299
- Database 301
- Adding a Static Binding 302
- Bindings 303
- Debugging Dynamic IP Lockdown 304
- Examples 309
- Filter Types and Operation 313
- Source-Port Filters 314
- Named Source-Port Filters 316
- [ index ] 318
- * ), indicating that the 327
- Editing a Source-Port Filter 328
- Filter Indexing 329
- Configuring Port-Based and 331
- User Authentication Methods 334
- as defined in the 337
- 802.1X standard 337
- VLAN Membership Priority 340
- Access Control 344
- Authenticators 348
- Based Authentication 350
- Wake-on-LAN Traffic 357
- 802.1X Open VLAN Mode 359
- VLAN Membership Priorities 360
- Unauthorized-Client VLANs 366
- Configure Port-Security 375
- Port-Security 376
- Other Switches 377
- Supplicant Port Configuration 379
- Statistics, and Counters 381
- ■ The switch reboots 394
- Affects VLAN Operation 395
- VLAN Assignment on a Port 396
- Based Authentication Session 398
- After the 802.1X session 401
- < port-number >: 403
- Port Security 407
- Eavesdrop Protection 408
- Blocking Unauthorized Traffic 408
- Trunk Group Exclusion 409
- Planning Port Security 410
- Port Security Display Options 411
- Configuring Port Security 415
- listing 418
- use this command syntax: 418
- Retention of Static Addresses 420
- MAC Lockdown 425
- MAC Lockdown Operating Notes 428
- MAC Lockout 429
- # VLANs # Lockout MACs 431
- < = 1024 16 431
- 1025-2048 8 431
- Port Security and MAC Lockout 432
- Security Features 433
- Alert Flags 433
- Send-Disable 435
- Resetting Alert Flags 436
- Yes” for the port on which 437
- Using Authorized IP Managers 443
- Access Levels 445
- Stations 446
- Managers 447
- Building IP Masks 452
- IP Entry 453
- Numerics 457
- 2 – Index 458
- Index – 3 459
- 4 – Index 460
- Index – 5 461
- 6 – Index 462
- Index – 7 463
- 8 – Index 464
- Index – 9 465
- 10 – Index 466
- Index – 11 467
- 12 – Index 468
- *5992-5525* 469
Relacionado con productos y manuales para Software HP Switch 6120
Software HP BMD00022 Manual de usuario
(228 paginas)
(228 paginas)
Software HP SN6000 Guía de usuario
(122 paginas)
(122 paginas)
Software HP 3PAR Manual de usuario
(89 paginas)
(89 paginas)
Software HP NEOVIEW 544530-001 Manual de usuario
(142 paginas)
(142 paginas)
Software HP 700wl Manual de usuario
(388 paginas)
(388 paginas)
Software HP X9300 Guía de instalación
(151 paginas)
(151 paginas)
Software HP SP1 Manual de usuario
(143 paginas)
(143 paginas)
Software HP Q.11. (2510-24) Manual de usuario
(294 paginas)
(294 paginas)
Software HP 441877-00F Manual de usuario
(67 paginas)
(67 paginas)
Software HP 2000s Guía de usuario
(200 paginas)
(200 paginas)
Software HP 2012i Manual de usuario
(86 paginas)
(86 paginas)
Software HP XP12000 Manual de usuario
(38 paginas)
(38 paginas)
Software HP Moonshot-180G Guía de usuario
(719 paginas)
(719 paginas)
Software HP Transcend Traffix Manager Manual de usuario
(186 paginas)
(186 paginas)
Software HP 377707-002 Manual de usuario
(92 paginas)
(92 paginas)
Software HP 1TB Manual de usuario
(80 paginas)
(80 paginas)
Software HP M401dne Manual de usuario
(160 paginas)
(160 paginas)
Software HP 441877-00B Manual de usuario
(176 paginas)
(176 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.172 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales