Fips Compliance; Aaa Configuration Considerations And Task List - HP FlexFabric 5700 Series Security Configuration Manual
Hide thumbs
Also See for FlexFabric 5700 Series:
- Configuration manual (185 pages) ,
- Configuration manual (63 pages) ,
- Configuration manual (125 pages)
Table of Contents
No.
Sub-attribute
26
Connect_ID
28
Ftp_Directory
29
Exec_Privilege
59
NAS_Startup_Timestamp
60
Ip_Host_Addr
61
User_Notify
62
User_HeartBeat
140
User_Group
141
Security_Level
201
Input-Interval-Octets
202
Output-Interval-Octets
203
Input-Interval-Packets
204
Output-Interval-Packets
205
Input-Interval-Gigawords
206
Output-Interval-Gigawords
207
Backup-NAS-IP
255
Product_ID
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode (see
AAA configuration considerations and task list
To configure AAA, complete the following tasks on the NAS:
Description
Index of the user connection.
FTP, SFTP, or SCP user working directory.
When the RADIUS client acts as the FTP, SFTP, or SCP server, this
attribute is used to set the working directory for an FTP, SFTP, or SCP user
on the RADIUS client.
EXEC user priority.
Startup time of the NAS in seconds, which is represented by the time
elapsed after 00:00:00 on Jan. 1, 1970 (UTC).
User IP address and MAC address included in authentication and
accounting requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A space
is required between the IP address and the MAC address.
Information that must be sent from the server to the client transparently.
Hash value assigned after an 802.1X user passes authentication, which
is a 32-byte string. This attribute is stored in the user list on the NAS and
verifies the handshake packets from the 802.1X user. This attribute only
exists in Access-Accept and Accounting-Request packets.
User groups assigned after the SSL VPN user passes authentication. A
user can belong to multiple user groups that are separated by
semicolons. This attribute is used to work with the SSL VPN device.
Security level assigned after the SSL VPN user passes security
authentication.
Number of bytes input within a real-time accounting interval.
Number of bytes output within a real-time accounting interval.
Number of packets input within an accounting interval in the unit set on
the NAS.
Number of packets output within an accounting interval in the unit set on
the NAS.
Amount of bytes input within an accounting interval, in units of 4G bytes.
Amount of bytes output within an accounting interval, in units of 4G
bytes.
Backup source IP address for sending RADIUS packets.
Product name.
16
"Configuring
FIPS") and non-FIPS mode.
- Quick Links:
- Configuring Local Users
Hide quick links:
Table of Contents
Troubleshooting
