5120 SI Series

HP 5120 SI Series User Manual

HP 5120 SI Series

395 pages

To Next Page

To Next Page

Page #1 background image

Loading...

Page #1 background image

HP 5120 SI Switch Series

Security

Command Reference

Part number: 5998-1814

Software version: Release 1513

Document version: 6W100-20130830

Table of Contents

Command Reference1
Table of Contents3
AAA Configuration Commands12
- General AAA Configuration Commands12
- Local User Configuration Commands37
- RADIUS Configuration Commands49
- HWTACACS Configuration Commands81
802.1X Configuration Commands102
- Display Dot1X102
- Dot1X105
- Dot1X Authentication-Method106
- Dot1X Auth-Fail Vlan107
- Dot1X Critical Vlan108
- Dot1X Critical Recovery-Action109
- Dot1X Domain-Delimiter110
- Dot1X Guest-Vlan111
- Dot1X Handshake112
- Dot1X Handshake Secure113
- Dot1X Mandatory-Domain113
- Dot1X Max-User114
- Dot1X Multicast-Trigger116
- Dot1X Port-Control116
- Dot1X Port-Method117
- Dot1X Quiet-Period118
- Dot1X Re-Authenticate119
- Dot1X Retry120
- Dot1X Timer121
- Dot1X Unicast-Trigger122
- Reset Dot1X Statistics123
EAD Fast Deployment Configuration Commands124
- Dot1X Free-Ip124
- Dot1X Timer Ead-Timeout124
- Dot1X Url125
MAC Authentication Configuration Commands127
- Display Mac-Authentication127
- Mac-Authentication129
- Mac-Authentication Critical Vlan130
- Mac-Authentication Domain131
- Mac-Authentication Guest-Vlan132
- Mac-Authentication Max-User133
- Mac-Authentication Timer133
- Mac-Authentication User-Name-Format134
- Reset Mac-Authentication Statistics135
Portal Configuration Commands137
- Display Portal Acl137
- Display Portal Connection Statistics140
- Display Portal Free-Rule143
- Display Portal Interface145
- Display Portal Local-Server146
- Display Portal Server147
- Display Portal Server Statistics148
- Display Portal Tcp-Cheat Statistics150
- Display Portal User152
- Portal Auth-Fail Vlan153
- Portal Auth-Network154
- Portal Delete-User155
- Portal Domain155
- Portal Free-Rule156
- Portal Local-Server157
- Portal Local-Server Enable158
- Portal Local-Server Ip159
- Portal Max-User160
- Portal Move-Mode Auto160
- Portal Nas-ID-Profile161
- Portal Nas-Ip162
- Portal Nas-Port-Type162
- Portal Offline-Detect Interval163
- Portal Redirect-Url164
- Portal Server165
- Portal Server Banner166
- Portal Server Method166
- Portal Server Server-Detect167
- Portal Server User-Sync169
- Portal Web-Proxy Port170
- Reset Portal Connection Statistics171
- Reset Portal Server Statistics172
- Reset Portal Tcp-Cheat Statistics172
Port Security Configuration Commands173
- Display Port-Security173
- Display Port-Security Mac-Address Block175
- Display Port-Security Mac-Address Security177
- Port-Security Authorization Ignore179
- Port-Security Enable180
- Port-Security Intrusion-Mode180
- Port-Security Mac-Address Security181
- Port-Security Max-Mac-Count182
- Port-Security Ntk-Mode183
- Port-Security Oui184
- Port-Security Port-Mode184
- Port-Security Timer Disableport187
- Port-Security Trap187
User Profile Configuration Commands189
- Display User-Profile189
- User-Profile Enable190
- User-Profile190
Password Control Configuration Commands192
- Display Password-Control192
- Display Password-Control Blacklist193
- Password194
- Password-Control Aging195
- Password-Control Alert-Before-Expire196
- Password-Control Authentication-Timeout197
- Password-Control Complexity197
- Password-Control Composition198
- Password-Control { Aging | Composition | History | Length } Enable199
- Password-Control Enable200
- Password-Control Expired-User-Login201
- Password-Control History201
- Password-Control Length202
- Password-Control Login Idle-Time203
- Password-Control Login-Attempt203
- Password-Control Password Update Interval205
- Password-Control Super Aging205
- Password-Control Super Composition206
- Password-Control Super Length207
- Reset Password-Control Blacklist207
- Reset Password-Control History-Record208
HABP Configuration Commands209
- Display Habp209
- Display Habp Table210
- Display Habp Traffic210
- Habp Client Vlan211
- Habp Enable212
- Habp Server Vlan212
- Habp Timer213
Public Key Configuration Commands214
- Display Public-Key Local Public214
- Display Public-Key Peer216
- Peer-Public-Key End217
- Public-Key-Code Begin217
- Public-Key-Code End218
- Public-Key Local Create219
- Public-Key Local Destroy220
- Public-Key Local Export Dsa220
- Public-Key Local Export Rsa222
- Public-Key Peer223
- Public-Key Peer Import Sshkey223
PKI Configuration Commands225
- Attribute225
- Ca Identifier226
- Certificate Request Entity226
- Certificate Request from227
- Certificate Request Mode228
- Certificate Request Polling228
- Certificate Request Url229
- Common-Name230
- Country230
- Crl Check231
- Crl Update-Period231
- Crl Url232
- Display Pki Certificate233
- Display Pki Certificate Access-Control-Policy234
- Display Pki Certificate Attribute-Group235
- Display Pki Crl Domain236
- Fqdn238
- Ip (PKI Entity View)238
- Ldap-Server239
- Locality240
- Organization240
- Organization-Unit241
- Pki Certificate Access-Control-Policy241
- Pki Certificate Attribute-Group242
- Pki Delete-Certificate242
- Pki Domain243
- Pki Entity243
- Pki Import-Certificate244
- Pki Request-Certificate Domain245
- Pki Retrieval-Certificate246
- Pki Retrieval-Crl Domain246
- Pki Validate-Certificate247
- Root-Certificate Fingerprint247
- Rule (PKI CERT ACP View)248
- State249
SSH2.0 Configuration Commands250
- SSH2.0 Server Configuration Commands250
- SSH2.0 Client Configuration Commands257
SFTP Configuration Commands265
- SFTP Server Configuration Commands265
  - Sftp Server Enable265
  - Sftp Server Idle-Timeout265
- SFTP Client Configuration Commands266
SCP Configuration Commands280
- SCP Client Configuration Commands280
  - Scp280
SSL Configuration Commands282
- Ciphersuite282
- Client-Verify Enable283
- Close-Mode Wait283
- Display Ssl Client-Policy284
- Display Ssl Server-Policy285
- Handshake Timeout286
- Pki-Domain287
- Prefer-Cipher288
- Server-Verify Enable288
- Session289
- Ssl Client-Policy290
- Ssl Server-Policy290
- Version291
TCP Attack Protection Configuration Commands293
- Display Tcp Status293
- Tcp Anti-Naptha Enable294
- Tcp State294
- Tcp Syn-Cookie Enable295
- Tcp Timer Check-State296
IP Source Guard Configuration Commands297
- Display Ip Check Source297
- Display User-Bind298
- Ip Check Source300
- Ip Check Source Ipv6300
- Ip Check Source Max-Entries301
- User-Bind302
- User-Bind Ipv6303
ARP Attack Protection Configuration Commands304
- ARP Packet Rate Limit Configuration Commands304
  - Arp Rate-Limit304
- Source MAC Address Based ARP Attack Detection Configuration Commands304
- ARP Packet Source MAC Address Consistency Check Configuration Commands308
  - Arp Anti-Attack Valid-Check Enable308
- ARP Active Acknowledgement Configuration Commands308
  - Arp Anti-Attack Active-Ack Enable308
- ARP Detection Configuration Commands309
- ARP Gateway Protection Configuration Commands314
  - Arp Filter Source314
- ARP Filtering Configuration Commands314
  - Arp Filter Binding314
ND Attack Defense Configuration Commands316
- Source MAC Consistency Check Commands316
  - Ipv6 Nd Mac-Check Enable316
- ND Detection Configuration Commands316
SAVI Configuration Commands321
- Ipv6 Savi Dad-Delay321
- Ipv6 Savi Dad-Preparedelay321
- Ipv6 Savi Down-Delay322
- Ipv6 Savi Strict322
System-Guard Configuration Commands324
- Display System-Guard324
- System-Guard Aging Time325
- System-Guard Control325
- System-Guard Detect-Threshold326
- System-Guard Enable326
- System-Guard Rate-Limit327
FIPS Configuration Commands328
- Fips Mode Enable328
- Display Fips Status328
- Fips Self-Test329
Ipsec Configuration Commands330
- Ah Authentication-Algorithm330
- Connection-Name330
- Display Ipsec Policy331
- Display Ipsec Proposal334
- Display Ipsec Sa335
- Display Ipsec Session338
- Display Ipsec Statistics339
- Display Ipsec Tunnel341
- Encapsulation-Mode342
- Esp Authentication-Algorithm343
- Esp Encryption-Algorithm343
- Ike-Peer (Ipsec Policy View)344
- Ipsec Anti-Replay Check345
- Ipsec Anti-Replay Window345
- Ipsec Decrypt Check346
- Ipsec Policy (Interface View)346
- Ipsec Policy (System View)347
- Ipsec Proposal348
- Ipsec Sa Global-Duration349
- Ipsec Session Idle-Time349
- Pfs350
- Policy Enable351
- Proposal (Ipsec Policy View)351
- Qos Pre-Classify352
- Reset Ipsec Sa353
- Reset Ipsec Session354
- Reset Ipsec Statistics354
- Sa Authentication-Hex355
- Sa Duration356
- Sa Encryption-Hex357
- Sa Spi358
- Security Acl358
- Transform359
- Tunnel Local360
- Tunnel Remote361
IKE Configuration Commands362
- Authentication-Algorithm362
- Authentication-Method362
- Certificate Domain363
- Display Ike Dpd364
- Display Ike Peer365
- Display Ike Proposal366
- Display Ike Sa367
- Dpd370
- Encryption-Algorithm371
- Exchange-Mode372
- ID-Type372
- Ike Dpd373
- Ike Local-Name373
- Ike Next-Payload Check Disabled374
- Ike Peer (System View)375
- Ike Proposal375
- Ike Sa Keepalive-Timer Interval376
- Ike Sa Keepalive-Timer Timeout376
- Ike Sa Nat-Keepalive-Timer Interval377
- Interval-Time378
- Local-Address378
- Local-Name379
- Nat Traversal380
- Peer380
- Pre-Shared-Key381
- Proposal (IKE Peer View)381
- Remote-Address382
- Remote-Name383
- Reset Ike Sa384
- Sa Duration385
- Time-Out385
Support and Other Resources387
- Contacting HP387
  - Subscription Service387
- Related Information387
  - Documents387
  - Websites387
- Conventions388
Index390

Other manuals for HP 5120 SI Series

Security Configuration Guide385 pages

Specification33 pages

Questions and Answers:

Need help?

Do you have a question about the HP 5120 SI Series and is the answer not in the manual?

HP 5120 SI Series Specifications

General

Brand	HP
Model	5120 SI Series
Category	Switch
Language	English

Related product manuals

Preview: HP 5120 EI Switch Series

HP 5120 EI Switch Series

Preview: HP 5120 series

Preview: HP 5120 EI Series

HP 5120 EI Series

Preview: HP A3100-8 v2 SI

HP A3100-8 v2 SI

Preview: HP A5500 SI Switch Series

HP A5500 SI Switch Series

Preview: HP 5130 EI series

HP 5130 EI series

Preview: HP 5130-24G-4SFP+ EI

HP 5130-24G-4SFP+ EI

Preview: HP 5130 EI Switch Series

HP 5130 EI Switch Series

HP HPE 5140 24G 4SFP+ EI

Preview: HP FlexNetwork 5130 HI series

HP FlexNetwork 5130 HI series

Preview: HP FlexNetwork 5140 EI Series

HP FlexNetwork 5140 EI Series

Preview: HP 5920