Table of Contents
Advertisement
C
S
ONFIGURING
ECURITY
C
U
ONFIGURING
SER
A
CCOUNTS
You can configure this switch to authenticate users logging into the system
for management access or to control client access to the data ports.
Management Access Security (Switch menu) – Management access to the
switch can be controlled through local authentication of user names and
passwords stored on the switch, or remote authentication of users via a
RADIUS or TACACS+ server. Additional authentication methods includes
Secure Shell (SSH), Secure Hypertext Transfer Protocol (HTTPS) over the
Secure Socket Layer (SSL), static configuration of client addresses, and
SNMP.
General Security Measures (Network menu) – This switch supports many
methods of segregating traffic for clients attached to each of the data
ports, and for ensuring that only authorized clients gain access to the
network. Private VLANs and port-based authentication using IEEE 802.1X
are commonly used for these purposes. In addition to these methods,
several other options of providing client security are supported by this
switch. These include limiting the number of users accessing a port. The
addresses assigned to DHCP clients can also be carefully controlled using
static or dynamic bindings with DHCP Snooping and IP Source Guard
commands. ARP Inspection can also be used to validate the MAC address
bindings for ARP packets, providing protection against ARP traffic with
invalid MAC to IP address bindings, which forms the basis for "man-in-the-
middle" attacks.
Use the User Configuration page to control management access to the
switch based on manually configured user names and passwords.
P
ATH
Configuration, Security, Switch, Users
C
U
OMMAND
SAGE
The default guest name is "guest" with the password "guest." The
◆
default administrator name is "admin" with the password "admin."
The guest only has read access for most configuration parameters.
◆
However, the administrator has write access for all parameters
governing the onboard agent. You should therefore assign a new
administrator password as soon as possible, and store it in a safe place.
The administrator has a privilege level of 15, with access to all process
◆
groups and full control over the device. If the privilege level is set to
any other value, the system will refer to each group privilege level. The
user's privilege should be same or greater than the group privilege
level to have the access of a group. By default, most of the group
privilege levels are set to 5 which provides read-only access and
privilege level 10 which also provides read/write access. To perform
system maintenance (software upload, factory defaults, etc.) the user's
privilege level should be set to 15. Generally, the privilege level 15 can
– 55 –
| Configuring the Switch
C
4
HAPTER
Configuring Security
Hide quick links:
Advertisement
Table of Contents
