Cisco Nexus 5000 Series NX-OS Security Configuration Guide, Release 5.2(1)N1(1)

Contents

A - C - D - E - F - G - I - L - M - N - P - R - S - T - U - V

Index

A

AAA

accounting 1

authentication 1

benefits 1

configuring console login 1

configuring for Cisco TrustSec 1

configuring for RADIUS servers 1

configuring nonseed device for Cisco TrustSec 1

configuring seed device for Cisco TrustSec 1

default settings 1

description 1

enabling MSCHAP authentication 1

example configuration 1

guidelines 1

limitations 1

prerequisites 1

user login process 1

verifying configurations 1

AAA accounting

configuring default methods 1

AAA accounting logs

clearing 1

displaying 1

AAA logins

enabling authentication failure messages 1

AAA protocols

RADIUS 1

TACACS+ 1

AAA server groups

description 1

AAA servers

specifying SNMPv3 parameters 1 2

specifying user roles 1

specifying user roles in VSAs 1

AAA services

configuration options 1

remote 1

accounting

description 1

ACL

processing order 1

sequence numbers 1

ACL implicit rules 1

ACLs

applications 1

creating log entries for 1

guidelines 1

identifying traffic by protocols 1

licensing 1

limitations 1

prerequisites 1

types 1

VLAN 1

authentication

Cisco TrustSec 1

configuring for Cisco TrustSec 1

description 1

local 1

methods 1

remote 1

user login 1

authorization

user login 1

C

Cisco

vendor ID 1 2

Cisco TrustSec 1

architecture 1

authorization 1

configuring 1

configuring AAA on nonseed device 1

configuring AAA on seed device 1

configuring device credentials 1

default values 1

description 1

enabling 1

enabling (example) 1

environment data download 1

example configurations 1

guidelines 1

licensing 1

limitations 1

manually configuring SXP 1

policy acquisition 1

prerequisites 1

RADIUS relay 1

SGACLs 1 2

SGTs 1

verifying configuration 1

Cisco TrustSec authentication

802.1X role selection description 1

configuration process 1

configuring 1 2

configuring in manual mode 1

description 1 2

EAP-FAST enhancements 1

manual mode configuration examples 1

summary 1

Cisco TrustSec authorization 1

configuration process 1

configuring 1

Cisco TrustSec device credentials

description 1

Cisco TrustSec device identities

description 1

Cisco TrustSec environment data

download 1

Cisco TrustSec policies

example enforcement configuration 1 2 3

Cisco TrustSec seed devices

description 1 2

example configuration 1

Cisco TrustSec user credentials

description 1

cisco-av-pair

specifying AAA user parameters 1 2

class maps

CoPP 1

clearing statistics

CoPP 1

configuration status

CoPP 1

control plane

policies

applying 1

control plane class maps

verifying the configuration 1

control plane policy maps

verifying the configuration 1

control plane protection

CoPP 1

packet types 1

control plane protection, classification 1

control plane protection, CoPP

rate controlling mechanisms 1

CoPP 1

class maps 1

clearing statistics 1

configuration status 1

control plane protection 1

control plane protection, classification 1

default settings 1

feature history 1

guidelines 1

information about 1

licensing 1

limitations 1

monitoring 1

policy templates 1

restrictions for management interfaces 1

verifying the configuration 1

CoPP policies

applying 1

customized 1

default 1

scaled Layer 2 1

scaled Layer 3 1

CoPP policy

customized

modifying 1

CTS 1

See Cisco TrustSec 1

customized CoPP policy 1

modifying 1

D

DAI

default settings 1

guidelines 1

limitations 1

deafult settings

port security 1

default CoPP policy 1

default settings

AAA 1

CoPP 1

DAI 1

IP Source Guard 1

DHCP binding database 1

DHCP relay agent

enabling or disabling 1

DHCP snooping

binding database 1

default settings 1

description 1

guidelines 1

limitations 1

overview 1

DHCP snooping binding database

described 1

description 1

entries 1

dynamic ARP inspection

ARP cache poisoning 1

ARP requests 1

ARP spoofing attack 1

DHCP snooping binding database 1

function of 1

interface trust states 1

logging of dropped packets 1

network security issues and interface trust states 1

Dynamic Host Configuration Protocol snooping 1

See DHCP snooping 1

E

examples

AAA configurations 1

F

feature history

CoPP 1

G

guidelines

ACLs 1

CoPP 1

DAI 1

DHCP snooping 1

port security 1

I

IDs

Cisco vendor ID 1 2

IP ACL implicit rules 1

IP ACL statistics

clearing 1

monitoring 1

IP ACLs

applications 1

applying as a Router ACL 1

applying as port ACLs 1

changing 1

changing sequence numbers in 1

description 1

logical operation units 1

logical operators 1

removing 1

types 1

IP Source Guard

default settings 1

L

licensing

ACLs 1

Cisco TrustSec 1

CoPP 1

limitations

ACLs 1

CoPP 1

DAI 1

DHCP snooping 1

port security 1

logging

creating ACL for 1

logical operation units

IP ACLs 1

logical operators

***

IP ACLs 1

login

RADIUS servers 1

LOU 1

See logical operation units 1

M

MAC ACL implicit rules 1

MAC addresses

learning 1

management interfaces

CoPP restrictions 1

monitoring

CoPP 1

RADIUS 1

RADIUS servers 1

MSCHAP

enabling authentication 1

N

new and changed information 1

P

policy templates

description 1

port ACL 1

port security

default settings 1

guidelines 1

limitations 1

MAC address learning 1

MAC move 1

violations 1

preshared keys

TACACS+ 1

R

RADIUS

configuring servers 1

configuring timeout intervals 1

configuring transmission retry counts 1

default settings 1

description 1

example configurations 1

monitoring 1

network environments 1

operations 1

prerequisites 1

relay for Cisco TrustSec 1

statistics, displaying 1

RADIUS server groups

global source interfaces 1

RADIUS server preshared keys 1

RADIUS servers

allowing users to specify at login 1

configuring AAA for 1

configuring timeout interval 1

configuring transmission retry count 1

deleting hosts 1

displaying statistics 1

example configurations 1

manually monitoring 1

RADIUS statistics

clearing 1

RADIUS, global preshared keys 1

RADIUS, periodic server monitoring 1

RADIUS, server hosts

configuring 1

rate controlling mechanisms

control plane protection, CoPP 1

remote devices

connecting to using SSH 1

router ACLs 1

rules

implicit 1

S

scaled Layer 2 CoPP policy 1

scaled Layer 3 CoPP policy 1

secure MAC addresses

learning 1

security

policies

applying 1

port

MAC address learning 1

security group access lists 1

See SGACLs 1

security group tag 1

See SGT 1

server groups 1

servers

RADIUS 1

SGACL policies

clearing 1

displaying downloaded policies 1

manually configuring 1

SGACL policy enforcement

enabling on VLANs 1

enabling on VRF instances 1

SGACLs

configuring 1

description 1

example manual configuration 1

example SGT mapping configuration 1 2 3

SGACLs policies

acquisition 1

refreshing downloaded policies 1

SGT Exchange Protocol 1

See SXP 1

SGTs

description 1

example mapping configuration 1 2 3

manually configuring 1

manually configuring address-to-SGACL mapping 1 2

propagation with SXP 1

SNMPv3

specifying AAA parameters 1

specifying parameters for AAA servers 1

source interfaces

RADIUS server groups 1

TACACS+ server groups 1

SSH

description 1

SSH clients 1

SSH server keys 1

SSH servers 1

SSH sessions

clearing 1

connecting to remote devices 1

statistics

clearing 1

monitoring 1

TACACS+ 1

SXP

changing reconcile periods 1

changing retry periods 1

configuration process 1

configuring default passwords 1

configuring default source IP addresses 1

configuring manually 1

configuring peer connections 1

enabling 1

SGT propagation 1

SXP connections

example manual configuration 1

T

TACACS+

advantages over RADIUS 1

configuring 1

configuring global timeout interval 1

description 1 2

displaying statistics 1

example configurations 1

field descriptions 1

global preshared keys 1

limitations 1

prerequisites 1

preshared key 1

user login operation 1

verifying configuration 1

TACACS+ server groups

global source interfaces 1

TACACS+ servers

configuring hosts 1

configuring TCP ports 1

configuring timeout interval 1

displaying statistics 1

field descriptions 1

manually monitoring 1

verifying configuration 1

TCP ports

TACACS+ servers 1

Telnet

description 1

Telnet server

enabling 1

reenabling 1

Telnet servers 1

Telnet sessions

clearing 1

connecting to remote devices 1

U

user login

authentication process 1

authorization process 1

user roles

specifying on AAA servers 1 2

V

vendor-specific attributes 1

VLAN ACLs

information about 1

VSAs

format 1

protocol options 1

support description 1