Cisco Nexus 3548 Switch NX-OS Security Configuration Guide, Release 10.5(x)

Contents

* - A - C - D - E - F - G - H - I - L - M - P - R - S - T - U - V

Index

*

*** 1

A

AAA

accounting 1

authentication 1

benefits 1

configuring console login 1

configuring for RADIUS servers 1

default settings 1

description 1

enabling MSCHAP authentication 1

example configuration 1

prerequisites 1

user login process 1

verifying configurations 1

AAA accounting

configuring default methods 1

AAA accounting logs

clearing 1

displaying 1

AAA authorization

configuring on TACACS+ servers 1

aaa authorization default 1

aaa authorization ssh-certificate default 1

aaa authorization {group | local} 1

aaa authorization {ssh-certificate | ssh-publickey} 1

aaa group server ldap 1

AAA logins

enabling authentication failure messages 1

AAA protocols

RADIUS 1

TACACS+ 1

AAA server groups

description 1

AAA servers

specifying SNMPv3 parameters 1 2

specifying user roles 1

specifying user roles in VSAs 1

AAA services

configuration options 1

remote 1

accounting

description 1

ACL

processing order 1

sequence numbers 1

ACL implicit rules 1

ACL TCAM regions

configuring 1 2 3

reverting to default sizes 1

ACLs

applications 1

identifying traffic by protocols 1

licensing 1

prerequisites 1

types 1

VLAN 1

authentication

description 1

local 1

methods 1

remote 1

user login 1

authentication (bind-first | compare} 1

authorization

user login 1

verifying commands 1

C

CA trust points

creating associations for PKI 1

CAs

authenticating 1

configuring 1

deleting certificates 1

description 1

displaying configuration 1

enrollment using cut-and-paste 1

example configuration 1

example of downloading certificate 1

generating identity certificate requests 1

identity 1

installing identity certificates 1

multiple 1

multiple trust points 1

peer certificates 1

purpose 1

certificate authorities. 1

See CAs 1

certificate revocation checking

configuring methods 1

certificate revocation lists 1

See CRLs 1

certificates

example of revoking 1

Cisco

vendor ID 1 2

cisco-av-pair

specifying AAA user parameters 1 2

class maps

configuring for CoPP 1

clear ldap-server statistics 1

clearing statistics

CoPP 1

commands

disabing authorization verification 1

enabing authorization verification 1

configuration example 1

configuration examples

CoPP 1

configuration status

CoPP 1

control plane class maps

verifying the configuration 1

control plane policy maps

verifying the configuration 1

control plane protection

CoPP 1

packet types 1

control plane protection, classification 1

control plane protection, CoPP

rate controlling mechanisms 1

control plane service policy, configuring

CoPP 1

CoPP 1

clearing statistics 1

configuration examples 1

configuration status 1

configuring class maps 1

configuring policy maps 1

control plane protection 1

control plane protection, classification 1

control plane service policy, configuring 1

default policy 1

guidelines 1

information about 1

limitations 1

monitoring 1

policy templates 1

restrictions for management interfaces 1

upgrade guidelines 1

verifying the configuration 1

CoPP policy

layer 2 1

CoPP policy maps

configuring 1

CRLs

configuring 1

description 1

downloading 1

generating 1

importing example 1

publishing 1

D

default CoPP policy 1

default settings

AAA 1

MAC ACLs 1

PKI 1

denial-of-service attacks

IP address spoofing, mitigating 1

DHCP binding database 1

DHCP Option 82

enabling or disabling data insertion and removal 1

DHCP relay agent

described 1

enabling or disabling 1

enabling or disabling Option 82 1

enabling or disabling subnet broadcast support on a Layer 3 Interface 1

enabling or disabling VRF support 1

VRF support 1

DHCP relay binding database

description 1

DHCP relay statistics

clearing 1

DHCP server addresses

configuring 1

dhcp snooping

prerequisites 1

DHCP snooping

binding database 1

default settings 1

guidelines 1

limitations 1

overview 1

DHCP snooping binding database

described 1

description 1

entries 1

digital certificates

configuring 1

description 1 2

exporting 1

importing 1

peers 1

purpose 1

DoS attacks

Unicast RPF, deploying 1

E

enable Cert-DN-match 1

enable user-server-group 1

examples

AAA configurations 1

F

feature ldap 1

G

guidelines

CoPP 1

DHCP snooping 1

H

hostnames

configuring for PKI 1

I

identity certificates

deleting for PKI 1

generating requests 1

installing 1

IDs

Cisco vendor ID 1 2

IP ACL

creating 1

IP ACL implicit rules 1

IP ACL statistics

clearing 1

monitoring 1

IP ACLs

applications 1

applying as a Router ACL 1

applying as port ACLs 1

changing 1

changing sequence numbers in 1

description 1

logical operation units 1

logical operators 1

removing 1

types 1

IP domain names

configuring for PKI 1

L

layer 2

CoPP policy 1

ldap search-map 1

ldap-server deadtime 1 2

ldap-server host 1 2 3 4

ldap-server host idle-time 1

ldap-server host password 1 2

ldap-server host port 1 2

ldap-server host rootDN 1

ldap-server host test rootDN 1

ldap-server host timeout 1 2

ldap-server host username 1

ldap-server timeout 1

licensing

ACLs 1

limitations

CoPP 1

DHCP snooping 1

logical operation units

IP ACLs 1

logical operators

***

IP ACLs 1

login

RADIUS servers 1

LOU 1

See logical operation units 1

M

MAC ACL implicit rules 1

MAC ACLs

default settings 1

MAC packet classification

configuring 1

description 1

management interfaces

CoPP restrictions 1

monitoring

CoPP 1

RADIUS 1

RADIUS servers 1

MSCHAP

enabling authentication 1

P

PKI

certificate revocation checking 1

configuring hostnames 1

configuring IP domain names 1

default settings 1

description 1

displaying configuration 1

enrollment support 1

example configuration 1

generating RSA key pairs 1

guidelines 1

limitations 1

policy templates

description 1

port ACL 1

prerequisites

dhcp snooping 1

preshared keys

TACACS+ 1

privilege level support for TACACS+ authorization

configuring 1

privilege roles

permitting or denying commands for 1

R

RADIUS

configuring servers 1

configuring timeout intervals 1

configuring transmission retry counts 1

default settings 1

description 1

example configurations 1

monitoring 1

network environments 1

operations 1

prerequisites 1

statistics, displaying 1

RADIUS server groups

global source interfaces 1

RADIUS server preshared keys 1

RADIUS servers

allowing users to specify at login 1

configuring AAA for 1

configuring timeout interval 1

configuring transmission retry count 1

deleting hosts 1

example configurations 1

manually monitoring 1

RADIUS statistics

clearing 1

RADIUS, global preshared keys 1

RADIUS, periodic server monitoring 1

RADIUS, server hosts

configuring 1

rate controlling mechanisms

control plane protection, CoPP 1

remote devices

connecting to using SSH 1

router ACLs 1

RSA key pairs

deleting from an Cisco NX-OS device 1

exporting 1

generating for PKI 1

importing 1

RSA key-pairs

description 1

displaying configuration 1

exporting 1

importing 1

multiple 1

rules

implicit 1

S

sample configuration 1

server 1

server groups 1

servers

RADIUS 1

show aaa authorization 1

show ldap-search-map 1 2

show ldap-server 1 2 3 4 5 6 7 8

show ldap-server groups 1 2

show ldap-server statistics 1 2 3

show running-config ldap 1

show startup-config ldap 1

show user-account 1

SNMPv3

specifying AAA parameters 1

specifying parameters for AAA servers 1

source interfaces

RADIUS server groups 1

TACACS+ server groups 1

SSH

description 1

SSH clients 1

SSH server keys 1

SSH servers 1

SSH sessions

clearing 1

connecting to remote devices 1

statistics

clearing 1

monitoring 1

TACACS+ 1

T

TACACS+

advantages over RADIUS 1

configuring 1

configuring global timeout interval 1

description 1 2

displaying statistics 1

example configurations 1

field descriptions 1

global preshared keys 1

limitations 1

prerequisites 1

preshared key 1

user login operation 1

verifying command authorization 1

verifying configuration 1

TACACS+ command authorization

configuring 1

testing 1

TACACS+ server groups

global source interfaces 1

TACACS+ servers

configuring hosts 1

configuring TCP ports 1

configuring timeout interval 1

displaying statistics 1

field descriptions 1

manually monitoring 1

verifying configuration 1

TCAMs

configuring 1 2 3

reverting to default sizes 1

TCP ports

TACACS+ servers 1

Telnet

description 1

Telnet server

enabling 1

reenabling 1

Telnet servers 1

Telnet sessions

clearing 1

connecting to remote devices 1

trust points

description 1

multiple 1

saving configuration across reboots 1

U

Unicast RPF

BOOTP and 1

default settings 1

deploying 1

description 1 2

DHCP and 1

example configurations 1

FIB 1

guidelines 1

limitations 1

loose mode 1

statistics 1

strict mode 1

tunneling and 1

verifying configuration 1

upgrade

guidelines for CoPP 1

use-vrf 1

user login

authentication process 1

authorization process 1

user roles

specifying on AAA servers 1 2

V

vendor-specific attributes 1

VLAN ACLs

information about 1

VSAs

format 1

protocol options 1

support description 1