Enterasys D-Series Spezifikationen Seite 463
- Seite / 540
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Enterasys D-Series CLI Reference 17-1
17
Security Configuration
ThischapterdescribestheSecurityConf igurationsetofcommandsandhowtousethem.
Overview of Security Methods
Thefollowingsecuritymethodsareavailableforcontrollingwhichusersareallowe d toaccess,
monitor,andmanagethe switch.
•Loginuseraccountsandpasswords–usedtologintotheCLIviaaTelnetconnectionorlocal
COMportconnection.Fordetails,referto“SettingUserAccountsandPasswords”
on
page 3‐2.
•HostAccessControlAuthentication(HACA)–a uthenti catesuseraccessofTelnet
management,consolelocalmanagementandWebViewviaacentralRADIUSClient/Server
application.WhenRADIUSisenabled,thisessentiallyoverridesloginuseraccounts.When
HACAisactiveperavalidRADIUSconfiguration,theusernamesandpasswordsused
to
accesstheswitchviaTelnet,SSH,WebView,andCOMportswillbevalidatedagainstthe
configuredRADIUSserver.OnlyinthecaseofaRADIUStimeoutwillthosecredentialsbe
comparedagainstcredentialslocallyconfiguredontheswitch.
Fordetails,referto
“ConfiguringRADIUS”onpage 17‐3.
•SNMPuserorcommunitynames–allowsaccesstotheD‐SeriesswitchviaanetworkSNMP
managementapplication.Toaccesstheswitch,youmustenteranSNMPuserorcommunity
namestring.Thelevelofmanagementaccessisdependenton
theassociatedaccesspolicy.For
details,refertoChapter 7 .
• 802.1XPortBasedNetworkAccessControlusingEAPOL(ExtensibleAuthenticationProtocol)
–providesamechanismviaaRADIUSserverforadministratorstosecurelyauthenticateand
grantappropriateaccesstoenduserdevicescommunicatingwithD‐Seriesports.Fordetails
For information about... Refer to page...
Overview of Security Methods 17-1
Configuring RADIUS 17-3
Configuring 802.1X Authentication 17-11
Configuring MAC Authentication 17-21
Configuring Multiple Authentication Methods 17-33
Configuring VLAN Authorization (RFC 3580) 17-45
Configuring MAC Locking 17-51
Configuring Port Web Authentication (PWA) 17-62
Configuring Secure Shell (SSH) 17-74
- Enterasys 1
- D-Series 1
- Contents 7
- Chapter 6: Port Configuration 10
- Chapter 7: SNMP Configuration 12
- About This Guide 25
- Related Documents 26
- Getting Help 27
- Introduction 29
- Factory Default Settings 30
- 1-4 Introduction 32
- Starting a CLI Session 33
- Logging In 34
- CLI Command Modes 35
- Performing Keyword Lookups 35
- Displaying Scrolling Screens 36
- Basic Line Editing Commands 37
- 1-10 Introduction 38
- Basic Configuration 39
- 2-4 Basic Configuration 42
- 2-6 Basic Configuration 44
- 2-8 Basic Configuration 46
- 2-10 Basic Configuration 48
- D2(rw)->clear ip address 49
- D2(su)->show ip protocol 50
- Switchcommand,read‐only 51
- 2-14 Basic Configuration 52
- 2-16 Basic Configuration 54
- D2(su)->show time 55
- THU SEP 05 09:21:57 2002 55
- D2(su)->set time 7:50:00 55
- 2-18 Basic Configuration 56
- 2-20 Basic Configuration 58
- D2(rw)->clear banner motd 60
- 2-24 Basic Configuration 62
- D2(su)->set width 50 63
- D2(su)->set length 50 64
- D2(su)->set logout 10 65
- D2(su)->show console 65
- Downloading a Firmware Image 66
- Reverting to a Previous Image 68
- 2-36 Basic Configuration 74
- 2-38 Basic Configuration 76
- 2-40 Basic Configuration 78
- 2-42 Basic Configuration 80
- D2(rw)->set tftp retry 3 81
- D2(rw)-> clear tftp retry 81
- Clearing and Closing the CLI 82
- Resetting the Switch 83
- D2(su)->clear config all 84
- Using and Configuring WebView 85
- D2(rw)->show ssl 86
- SSL status: Enabled 86
- 2-50 Basic Configuration 88
- Activating Licensed Features 89
- Configuring CDP 97
- Commands 103
- Parameters 104
- Defaults 104
- Examples 108
- Overview 109
- Configuration Tasks 110
- Port Configuration 127
- Reviewing Port Status 129
- 6-4 Port Configuration 130
- 6-8 Port Configuration 134
- Setting Speed and Duplex Mode 136
- 6-12 Port Configuration 138
- 6-14 Port Configuration 140
- 6-16 Port Configuration 142
- 144
- Setting Flow Control 145
- 6-22 Port Configuration 148
- 6-26 Port Configuration 152
- 6-28 Port Configuration 154
- Port Mirroring 159
- 6-34 Port Configuration 160
- LACP Operation 162
- LACP Terminology 163
- D-Series Usage Considerations 163
- 6-42 Port Configuration 168
- 6-44 Port Configuration 170
- Configuring Protected Ports 176
- 6-52 Port Configuration 178
- 6-54 Port Configuration 180
- SNMP Configuration 181
- SNMP Configuration Summary 182
- 7-2 SNMP Configuration 182
- Reviewing SNMP Statistics 183
- 7-6 SNMP Configuration 186
- 7-10 SNMP Configuration 190
- 7-12 SNMP Configuration 192
- 7-14 SNMP Configuration 194
- 7-18 SNMP Configuration 198
- Configuring SNMP MIB Views 199
- 7-24 SNMP Configuration 204
- 7-26 SNMP Configuration 206
- About SNMP Notify Filters 208
- 7-30 SNMP Configuration 210
- 7-32 SNMP Configuration 212
- 7-34 SNMP Configuration 214
- Row status = active 216
- 7-38 SNMP Configuration 218
- Spanning Tree Configuration 219
- Spanning Tree Features 220
- Loop Protect 220
- Force Version is mstp 226
- BPDU forwarding is disabled 227
- Spanguard is disabled 243
- Spanguard timeout: 300 245
- Legacy Path Cost is disabled 249
- 802.1Q VLAN Configuration 273
- Viewing VLANs 274
- 9-4 802.1Q VLAN Configuration 276
- D2(su)->clear vlan 9 278
- Setting the Host VLAN 290
- D2(su)->set host vlan 7 291
- D2(su)->clear host vlan 291
- How It Works 292
- Purpose 293
- Configuring Policy Profiles 317
- D2(rw)->show cos state 336
- D2(su)->clear cos state 337
- [type {drop}]} 342
- Configuring Port Priority 349
- IGMP Configuration 363
- Configuring IGMP at Layer 2 364
- 13-4 IGMP Configuration 366
- 13-6 IGMP Configuration 368
- 13-8 IGMP Configuration 370
- 13-10 IGMP Configuration 372
- Configuring System Logging 373
- Table 14-34 378
- D2(su)->show history 385
- History buffer size: 20 385
- D2(su)->set history 30 385
- [-d] [-n] [-v] host 390
- D2(su)->show mac agetime 393
- Aging time: 300 seconds 393
- D2(su)->clear mac agetime 394
- D2(su)->clear sntp client 401
- asan SNTPserver: 401
- fromtheSNTPserverlist: 402
- fromUTC 404
- Configuring Node Aliases 406
- RMON Configuration 409
- 15-2 RMON Configuration 410
- Statistics Group Commands 411
- 15-4 RMON Configuration 412
- Example 413
- History Group Commands 414
- Alarm Group Commands 417
- 15-12 RMON Configuration 420
- Event Group Commands 421
- Filter Group Commands 425
- "capture all" 427
- Packet Capture Commands 430
- 15-24 RMON Configuration 432
- DHCP Server Configuration 433
- Configuring a DHCP Server 434
- D2(rw)->set dhcp enable 436
- Configuring IP Address Pools 443
- Security Configuration 463
- Overview of Security Methods 464
- 17-2 Security Configuration 464
- Configuring RADIUS 465
- 17-8 Security Configuration 470
- 17-14 Security Configuration 476
- 17-16 Security Configuration 478
- 17-18 Security Configuration 480
- D2(su)->set eapol enable 481
- 17-24 Security Configuration 486
- 17-26 Security Configuration 488
- 17-28 Security Configuration 490
- 17-30 Security Configuration 492
- Switchcommand,read‐write 494
- 17-36 Security Configuration 498
- 17-38 Security Configuration 500
- 17-40 Security Configuration 502
- 17-42 Security Configuration 504
- 17-46 Security Configuration 508
- 17-48 Security Configuration 510
- 17-50 Security Configuration 512
- Configuring MAC Locking 513
- 17-54 Security Configuration 516
- 17-56 Security Configuration 518
- 17-58 Security Configuration 520
- 17-60 Security Configuration 522
- About PWA 524
- D2(su)->clear pwa banner 528
- 17-68 Security Configuration 530
- Guest Password: ********* 531
- 17-70 Security Configuration 532
- 17-72 Security Configuration 534
- D2(su)->set ssh disable 537
- 17-76 Security Configuration 538
- Index-1 539
Verwandte Produkte und Handbücher für Netzwerk-Switches Enterasys D-Series
(78 Seiten)
(92 Seiten)© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.283 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern