Default Security Settings - Cisco DS-C9216I-K9 Configuration Manual

Default Security Settings

Default Security Settings
Table 18-1
Table 18-1
Parameters
Roles in each switch (for CLI and SNMP users)
AAA authentication login
Telnet server
Accounting log file size on local disk
User's account expiration
User name
User password
Configured RADIUS sever
RADIUS server timeout interval
RADIUS preshared key
RADIUS key encryption
RADIUS server connection attempts
RADIUS Authentication port
RADIUS Accounting port
Server key encryption
TACACS+
Configured TACACS+ sever
TACACS+ server timeout interval
TACACS+ preshared key
TACACS+ key encryption
TACACS+ server connection attempts
TACACS+ Authentication port
VSAN policy
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
18-20
lists the default settings for all security features in any switch.
Default Security Settings
Chapter 18
Default
Two default roles—network-operator and
network-admin.
Local authentication is enabled. If the Telnet or
SSH options are not specified, the command
applies to both.
Enabled.
15,000 bytes.
Does not expire unless you explicitly configure it
to expire.
admin.
admin.
Allows access to all RADIUS severs.
The default time-out is one (1) seconds.
No key is configured.
clear text (0)—Not encrypted.
A switch tries to connect to a RADIUS server once
(1).
UDP port 1812.
UDP port 1813.
clear text (0)—Not encrypted.
Disabled
Allows access to all TACACS+ severs.
The default time-out is one (5) seconds.
No key is configured.
clear text (0)—Not encrypted
A switch tries to connect to a TACACS+ server
once (1).
UDP port 49.
Permit.
Configuring Switch Security
OL-7753-01