Ssh Access; Ssl; Tacacs And Tacacs - Dell PowerConnect B-RX Configuration Manual

SSH access

Commands
ip ssh client <ip-addr>
ssh access-group <num> | <name>

SSL

Commands
crypto-ssl certificate generate
crypto-ssl certificate zeroize
ip ssl certificate-data-file tftp <ip-addr>
<certificate-filename>
ip ssl port <port-number>
ip ssl private-key-file tftp <ip-addr> <key-filename>
web-management https

TACACS and TACACS+

Commands
aaa accounting commands <privilege-level> default
start-stop tacacs+ | none
aaa accounting exec default
start-stop tacacs+ | none
aaa accounting system default start-stop tacacs+ | none
aaa authentication enable implicit-user
aaa authentication login privilege-mode
aaa authorization commands <privilege-level> default
tacacs+ | none
aaa authorization exec default tacacs+ | none
enable aaa console
show aaa
tacacs-server dead-time <number>
tacacs-server host <ip-addr> | <server-name> [auth-port
<number> [authentication-only | authorization-only |
accounting-only | default] [key <string>]]
BigIron RX Series Configuration Guide
53-1002253-01
Security/Management
See ...
"Restricting SSH access to a specific IP address"
page 67
"Using ACLs to restrict SNMP access"
See ...
"Generating an SSL certificate"
"Deleting the SSL certificate"
"Importing digital certificates and RSA private key
files" on page 81
"Specifying a port for SSL communication"
page 81
"Importing digital certificates and RSA private key
files" on page 81
"Enabling the SSL server on the device"
See ...
"Configuring TACACS+ accounting for CLI commands"
on page 95
"Configuring TACACS+ accounting for Telnet/SSH
(Shell) access" on page 95
"Configuring TACACS+ accounting for system events"
on page 96
"Configuring Enable authentication to prompt for
password only" on page 91
"Entering privileged EXEC mode after a Telnet or SSH
login" on page 91
"Configuring command authorization"
"Configuring Exec authorization"
"AAA support for console commands"
"Displaying TACACS and TACACS+ statistics and
configuration information" on page 97
"Setting the dead time parameter"
"Specifying different servers for individual AAA
functions" on page 88
E
on
on page 65
on page 82
on page 82
on
on page 81
on page 94
on page 92
on page 95
on page 90
1367