HP A 5120 Manual

HP A5120 EI Switch Series 
Security 
Configuration Guide 
Abstract 
This  document  describes  the  software  features  for  the  HP  A  Series  products  and  guides  you  through  the 
software  configuration  procedures.  These  configuration  guides  also  provide  configuration  examples  to 
help you apply software features to different network scenarios. 
 
This documentation is intended for network planners, field technical support and servicing engineers, and 
network administrators working with...

Legal and notice information 
© Copyright 2011 Hewlett-Packard Development Company, L.P. 
No  part  of  this  documentation  may  be  reproduced  or  transmitted  in  any  form  or  by  any  means  without 
prior written consent of Hewlett-Packard Development Company, L.P. 
The information contained herein is subject to change without notice.  
HEWLETT-PACKARD  COMPANY  MAKES  NO  WARRANTY  OF  ANY  KIND  WITH  REGARD  TO  THIS 
MATERIAL,  INCLUDING,  BUT  NOT  LIMITED  TO,  THE  IMPLIED  WARRANTIES  OF...

iii 
Contents 
AAA configuration ··························································································································································· 1 
AAA overview ··································································································································································· 1 
RADIUS...

iv 
802.1X configuration ···················································································································································· 71 
HP implementation of 802.1X ······································································································································ 71 
Access control methods ········································································································································ 71...

v 
MAC authentication configuration examples ············································································································ 101 
Local MAC authentication configuration example ·························································································· 101 
RADIUS-based MAC authentication configuration example ·········································································· 103 
ACL assignment configuration example...

vi 
Setting the port security mode ···································································································································· 145 
Configuration prerequisites ································································································································ 145 
Configuration procedure ···································································································································· 145 
Configuring...

vii 
Key algorithm types ············································································································································ 179 
Asymmetric key algorithm applications ············································································································ 179 
Configuring the local asymmetric key pair ··············································································································· 180 
Creating an asymmetric key...

viii 
Displaying and maintaining SSH ······························································································································· 217 
SSH server configuration examples ··························································································································· 218 
When switch acts as server for password authentication ··············································································· 218 
When switch acts as server for...

ix 
Static IPv4 source guard binding entry configuration example ····································································· 256 
Global static binding excluded port configuration example ·········································································· 257 
Dynamic IPv4 source guard binding by DHCP snooping configuration example ······································· 259 
Dynamic IPv4 source guard binding by DHCP relay configuration example...

x 
Configuring the ND detection function ······················································································································ 284 
Introduction to ND detection ······························································································································ 284 
Configuring ND detection ·································································································································· 285 
Displaying and...