H3C S5830V2 Security Configuration Manual

Also see for S5820V2 series: Installation guide Configuration guide Command reference Command reference MCE Command Reference

Contents

H3C S5830V2 Security Configuration Manual Manual pdf 12 page image

vSpecifying a source IP address or source interface for the SFTP client ························································· 171Establishing a connection to an SFTP server ···································································································· 171Working with SFTP directories ··························································································································· 173Working with SFTP files ······································································································································ 173Displaying help information ······························································································································· 173Terminating the connection with the SFTP server ····························································································· 174Configuring the device as an SCP client ··················································································································· 174Displaying and maintaining SSH ······························································································································· 176Stelnet configuration examples ··································································································································· 176Password authentication enabled Stelnet server configuration example ······················································ 176Publickey authentication enabled Stelnet server configuration example ······················································· 179Password authentication enabled Stelnet client configuration example ························································ 184Publickey authentication enabled Stelnet client configuration example ························································ 187SFTP configuration examples ······································································································································ 189Password authentication enabled SFTP server configuration example ·························································· 189Publickey authentication enabled SFTP client configuration example ··························································· 191SCP file transfer with password authentication········································································································· 194Network requirements ········································································································································· 194Configuration procedure ···································································································································· 195Configuring SSL ······················································································································································· 197Overview······································································································································································· 197SSL security mechanism ······································································································································ 197SSL protocol stack ··············································································································································· 197FIPS compliance ··························································································································································· 198SSL configuration task list ············································································································································ 198Configuring an SSL server policy ······························································································································· 198Configuring an SSL client policy ································································································································ 199Displaying and maintaining SSL································································································································· 200Configuring IP source guard ·································································································································· 202Overview······································································································································································· 202Static IP source guard binding entries··············································································································· 202Dynamic IPv4 source binding entries ················································································································ 203IP source guard configuration task list ······················································································································· 203Configuring the IPv4 source guard function ·············································································································· 203Enabling IPv4 source guard on an interface ···································································································· 203Configuring a static IPv4 source guard binding entry on an interface ························································· 204Configuring the IPv6 source guard function ·············································································································· 205Enabling IPv6 source guard on an interface ···································································································· 205Configuring a static IPv6 source guard binding entry on an interface ························································· 205Displaying and maintaining IP source guard ············································································································ 206IP source guard configuration examples ··················································································································· 206Static IPv4 source guard configuration example ····························································································· 206Dynamic IPv4 source guard using DHCP snooping configuration example ················································· 208Dynamic IPv4 source guard using DHCP relay configuration example ························································ 210Static IPv6 source guard configuration example ····························································································· 211Configuring ARP attack protection························································································································· 212ARP attack protection configuration task list ············································································································· 212Configuring unresolvable IP attack protection ·········································································································· 212Configuring ARP source suppression ················································································································ 213Enabling ARP blackhole routing ························································································································ 213Displaying and maintaining unresolvable IP attack protection ······································································ 213Configuration example ······································································································································· 213Configuring ARP packet rate limit ······························································································································ 214