Controlling user access ·············································································································································· 43
FIPS compliance ····························································································································································· 43
Controlling Telnet/SSH logins ······································································································································ 43
Configuration procedures ····································································································································· 43
Configuration example ········································································································································· 44
Controlling SNMP access·············································································································································· 44
Configuration procedure ······································································································································ 44
Configuration example ········································································································································· 45
Configuration procedure ······································································································································ 46
Configuration example ········································································································································· 47
Configuring command accounting ······························································································································· 48
Configuration procedure ······································································································································ 49
Configuration example ········································································································································· 50
Configuring RBAC ······················································································································································ 52
Overview ········································································································································································· 52
Permission assignment ·········································································································································· 52
Assigning user roles ·············································································································································· 55
FIPS compliance ····························································································································································· 55
Configuration task list ···················································································································································· 55
Creating user roles ························································································································································· 56
Configuring user role rules ············································································································································ 56
Configuring feature groups ··········································································································································· 57
Assigning user roles ······················································································································································· 59
Configuration guidelines ······································································································································ 61
Displaying RBAC settings ·············································································································································· 63
RBAC configuration examples ······································································································································ 64
Troubleshooting RBAC ··················································································································································· 72
Configuring FTP ·························································································································································· 74
FIPS compliance ····························································································································································· 74
Using the device as an FTP server ································································································································ 74
Configuring basic parameters ····························································································································· 74
ii