Security Configurations
This section provides information on configuring security and examples of configuration
tasks.
To implement security features, configure the following components:
The following example displays default values for security parameters.
ALU-1>config>system>security# info detail
----------------------------------------------
...
7705 SAR OS System Management Guide
•
management access filters
•
CPM (CSM) filters
•
profiles
•
user access parameters
•
password management parameters
•
RADIUS and/or TACACS+
→ enable one to five RADIUS and/or TACACS+ servers
→ configure RADIUS and/or TACACS+ parameters
management-access-filter
ip-filter
default-action permit
entry 1
action permit
src-ip 10.10.10.xx/32
exit
entry 2
action permit
src-ip 10.10.0.xx/32
exit
exit
cpm-filter
ip-filter
shutdown
entry 2 create
action drop
exit
exit
profile "default"
default-action none
entry 10
no description
match "exec"
action permit
exit
entry 70
no description
match "show"
action permit
Security
Page 49