H3c-technologies H3C SecPath F1000-E Manual de usuario Pagina 9
- Pagina / 273
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
iv
AAA overview ······························································································································································ 149
RADIUS ································································································································································· 150
HWTACACS ························································································································································ 155
Domain-based user management ······················································································································ 157
AAA across VPNs ··············································································································································· 158
Protocols and standards ····································································································································· 159
RADIUS attributes ················································································································································ 159
Configuring AAA at the CLI ········································································································································ 162
Configuring AAA schemes ·········································································································································· 164
Configuring local users ······································································································································· 164
Configuring RADIUS schemes in the Web interface ······················································································· 169
RADIUS configuration example in the Web interface ····················································································· 175
Configure RADIUS schemes at the CLI ·············································································································· 182
RADIUS scheme configuration guidelines ········································································································· 193
Configuring HWTACACS schemes in the Web interface ·············································································· 194
HWTACACS configuration example in the Web interface ············································································ 198
Configuring HWTACACS schemes at the CLI ·································································································· 201
HWTACACS scheme configuration guidelines ································································································ 208
Configuring AAA methods for ISP domains ·············································································································· 208
Configuration prerequisites ································································································································ 208
Creating an ISP domain ····································································································································· 209
Configuring ISP domain attributes ····················································································································· 209
Configuring AAA authentication methods for an ISP domain ········································································ 210
Configuring AAA authorization methods for an ISP domain ········································································· 212
Configuring AAA accounting methods for an ISP domain ············································································· 213
Forcibly tearing down user connections ···················································································································· 215
Configuring a NAS ID-VLAN binding ························································································································ 215
Displaying and maintaining AAA ······························································································································ 216
AAA configuration examples ······································································································································ 216
Authentication and authorization for Telnet and SSH users by a RADIUS server ········································ 216
Local authentication and authorization for Telnet and FTP users ··································································· 225
Level switching authentication for Telnet users by a RADIUS server ······························································ 227
AAA for portal users by a RADIUS server ········································································································ 231
Troubleshooting AAA ·················································································································································· 244
Troubleshooting RADIUS ····································································································································· 244
Troubleshooting HWTACACS ···························································································································· 246
Configuring password control ································································································································ 247
Feature and hardware compatibility ·························································································································· 247
Password control overview ········································································································································· 247
Password control configuration task list ····················································································································· 250
Configuring password control ···································································································································· 250
Enabling password control ································································································································· 250
Setting global password control parameters ···································································································· 251
Setting user group password control parameters ···························································································· 252
Setting local user password control parameters ······························································································ 253
Setting super password control parameters ····································································································· 253
Setting a local user password in interactive mode ·························································································· 254
Displaying and maintaining password control ········································································································· 254
Password control configuration example ·················································································································· 255
Configuring FIPS······················································································································································ 258
Feature and hardware compatibility ·························································································································· 258
Overview ······································································································································································· 258
Configuring FIPS ··························································································································································· 258
- Preface 3
- Obtaining documentation 4
- Technical support 5
- Documentation feedback 5
- Contents 6
- Configuring ACLs 11
- Match order 12
- ACL rule numbering 13
- IPv4 ACL acceleration 13
- Configuration task list 14
- Creating an ACL 14
- Configuring a basic ACL rule 15
- Configuring ACL acceleration 21
- ACL configuration example 21
- Creating a time range 22
- Defining an ACL 22
- ACL configuration task list 25
- Configuring a basic ACL 26
- Configuring an advanced ACL 27
- Copying an ACL 30
- Configuring security zones 34
- Zone configuration task list 35
- Creating a zone 35
- Configuring a zone member 36
- Zone ID Display the zone ID 37
- Zone configuration example 38
- Configuration consideration 39
- HTTP configuration example 45
- Creating a basic ACL 46
- HTTPS configuration example 49
- Creating a PKI domain 50
- Generating an RSA key pair 51
- Adding a local user 53
- Address resource overview 55
- Exporting configuration 62
- Exporting configurations 68
- Importing configurations 69
- Interzone policy overview 73
- Enable Syslog 93
- Function 93
- Managing sessions 95
- 3. Click Apply 98
- Clearing sessions 108
- Overview 109
- Network requirements 110
- Configuring the host 110
- Configuring the SecPath 110
- Configuration guidelines 112
- Configuring ASPF 113
- ASPF configuration example 114
- Configuration procedure 115
- Verifying the configuration 120
- Authentication client 123
- Access device 123
- Portal server 123
- Security policy server 123
- Portal authentication mode 124
- Configuration prerequisites 127
- Logging off portal users 136
- SecPathHost 138
- RADIUS server 138
- { Name: newpt 147
- { IP address: 192.168.0.111 147
- { Key: portal 147
- { Port number: 50100 147
- Configuration considerations 153
- Troubleshooting portal 158
- Configuring AAA 159
- Client/server model 160
- RADIUS packet format 162
- Extended RADIUS attributes 164
- HWTACACS 165
- Domain-based user management 167
- AAA across VPNs 168
- Protocols and standards 169
- RADIUS attributes 169
- Configuring AAA at the CLI 172
- Configuring AAA schemes 174
- Command 176
- Remarks 176
- Configuring SecPath 189
- Creating a RADIUS scheme 192
- Creating an HWTACACS scheme 204
- Configuring HWTACACS server 205
- Item Descri 207
- Telnet user 209
- HWTACACS server 209
- 10.1.1.1/24 209
- Creating an ISP domain 219
- AAA configuration examples 226
- $enab1$ pass1 1 239
- $enab2$ pass2 2 239
- $enab3$ pass3 3 239
- Troubleshooting AAA 254
- Troubleshooting HWTACACS 256
- Configuring password control 257
- { Digits 0 to 9 259
- Configuring FIPS 268
- FIPS self-tests 269
- Conditional self-tests 270
- Triggering a self-test 270
- Task Command 271
- A C D E F I L O P S T V Z 272
Relacionado con productos y manuales para La Seguridad H3c-technologies H3C SecPath F1000-E
(234 paginas)
(17 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.108 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales