Account Security - ZyXEL Communications XMG1930-30 User Manual

The following table describes the labels in this screen.
Table 261 SECURITY > Access Control > Remote Management
LABEL
Entry
Active
Start Address
End Address
Telnet / FTP /
HTTP / ICMP /
SNMP / SSH /
HTTPS
Apply
Cancel

66.4 Account Security

Use this screen to encrypt all passwords configured in the Switch. This setting will affect how the
password is shown (as plain text or encrypted text) in the configuration file saved in MAINTENANCE >
Configuration > Save Configuration.
Note: Make sure to enable Password Encryption to avoid displaying passwords as plain text in
the configuration file.
Note: Be careful who can access configuration files with plain text passwords!
Password Encryption encrypts all passwords in the configuration file. However, if you want to show some
passwords as plain text in the configuration file, select them as below:
• Authentication information configured for Authentication in the SECURITY > AAA > AAA Setup screen
(Method 1/2/3 setting in the Privilege Enable and Login fields).
• Authorization information configured for Authorization in the SECURITY > AAA > AAA Setup screen
(Active/Console/Method setting in the Exec and Dot1x fields).
• Server information configured for Authentication Server in the SECURITY > AAA > RADIUS Server Setup
screen, and for Authentication Server in the SECURITY > AAA > TACACS+ Server Setup screen (Mode/
Timeout fields).
• System account information configured in the Switch (admin, user login name, and password).
• SNMP user account information configured in the SYSTEM > SNMP > SNMP User screen (password for
SNMP user authentication in the Authentication field, and the password for the encryption method for
SNMP communication in the Privacy field).
Note: The passwords will appear as encrypted text when Password Encryption is Active.
Click SECURITY > Access Control > Account Security to view the screen as shown next.
Chapter 66 Access Control
DESCRIPTION
This is the client set index number. A "client set" is a group of one or more "trusted computers"
from which an administrator may use a service to manage the Switch.
Enable the switch button to activate this secured client set. Clear the check box if you wish to
temporarily disable the set without deleting it.
Configure the IP address range of trusted computers from which you can manage this Switch.
The Switch checks if the client IP address of a computer requesting a service or protocol matches
the range set here. The Switch immediately disconnects the session if it does not match.
Select services that may be used for managing the Switch from the specified trusted computers.
Click Apply to save your changes to the Switch's run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to save
your changes to the non-volatile memory when you are done configuring.
Click Cancel to begin configuring this screen afresh.
XMG1930 Series User's Guide
464