Cisco SFE2000 Release Notes page 15

Release Notes for Cisco Small Business SFE2000 Series 24-port 10/100 Ethernet Switches
Secure Shell (SSH)
SSH is a protocol that provides a secure, remote connection to a device. SSH
version 2 is currently supported. The SSH server feature enables an SSH client to
establish a secure, encrypted connection with a device. This connection provides
functionality that is similar to an inbound telnet connection. SSH uses RSA and
DSA Public Key cryptography for device connections and authentication.
TACACS+
TACACS+ provides centralized security for validation of users accessing the
device. TACACS+ provides a centralized user management system, while still
retaining consistency with RADIUS and other authentication processes.
Password Management
Password management provides increased network security and improved
password control. Passwords for SSH, Telnet, HTTP, HTTPS, and SNMP access
are assigned security features.
802.1x Features
•
Single-host/Multiple-hosts— Single-host mode enables only the host that
has been authorized to get access to the port. Filtering is based on the
source MAC address. Multiple-hosts mode enables multiple hosts to be
attached to a single 802. 1 X-enabled port. In this mode, only one of the
attached hosts must be authorized for all hosts to be granted network
access. If the port becomes unauthorized (re-authentication fails or an
EAPOL-logoff message is received), all attached clients are denied access
to the network
•
Guest VLAN—limited access to the network when the port is unauthorized.
•
Unauthenticated VLANs—Some VLANs in the switch would always be
available, even if the port were unauthorized.
DoS Attack Prevention Engine
The device supports the ability to enable canned DoS protection to port,
including:
•
Illegal TCP/ICMP packet check
•
Martian address check
•
Prevention of TCP connections from a specific interface
Release Notes
15