Dell PowerConnect B-RX Configuration Manual page 27

BigIron RX Series Configuration Guide
53-1001986-01
Chapter 30 Configuring Secure Shell
Overview of Secure Shell (SSH) . . . . . . . . . . . . . . . . . . . . . . . . . . . .905
Configuring SSH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .906
Displaying SSH connection information . . . . . . . . . . . . . . . . . . . . .913
Using secure copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .914
Chapter 31 Configuring Multi-Device Port Authentication
How multi-device port authentication works. . . . . . . . . . . . . . . . . . 917
Configuring multi-device port authentication . . . . . . . . . . . . . . . . .919
Displaying multi-device port authentication information . . . . . . . .926
SSH version 2 support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .905
Supported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .906
Generating a host key pair . . . . . . . . . . . . . . . . . . . . . . . . . . . .907
Configuring DSA challenge-response authentication . . . . . . .908
Disabling 3-DES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .913
RADIUS authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917
Authentication-failure actions . . . . . . . . . . . . . . . . . . . . . . . . . .918
Supported RADIUS attributes . . . . . . . . . . . . . . . . . . . . . . . . . .918
Dynamic VLAN and ACL assignments. . . . . . . . . . . . . . . . . . . .918
Support for authenticating multiple MAC addresses
on an interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .919
Support for multi-device port authentication and 802.1x
on the same interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .919
Enabling multi-device port authentication . . . . . . . . . . . . . . . .919
Configuring an authentication method list for 802.1x . . . . . .920
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .920
Specifying the format of the MAC addresses sent to the
RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .921
Specifying the authentication-failure action . . . . . . . . . . . . . .921
Defining MAC address filters. . . . . . . . . . . . . . . . . . . . . . . . . . .922
Configuring dynamic VLAN assignment . . . . . . . . . . . . . . . . . .922
Specifying to which VLAN a port is moved after its
RADIUS-specified VLAN assignment expires . . . . . . . . . . . . . .923
Saving dynamic VLAN assignments to the running
configuration file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .924
Clearing authenticated MAC addresses . . . . . . . . . . . . . . . . . .924
Disabling aging for authenticated MAC addresses . . . . . . . . .925
Specifying the aging time for blocked MAC addresses . . . . . .925
Displaying authenticated MAC address information . . . . . . . .926
Displaying multi-device port authentication configuration
information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .927
Displaying multi-device port authentication information for
a specific MAC address or port . . . . . . . . . . . . . . . . . . . . . . . . .929
Displaying the authenticated MAC addresses . . . . . . . . . . . . .930
Displaying the non-authenticated MAC addresses . . . . . . . . .930
xxvii