Overview Of Security Methods; Chapter 24: Security Configuration - Enterasys Matrix DFE-Gold Series Configuration Manual

This chapter describes the Security Configuration set of commands and how to use them.
For information about...

Overview of Security Methods

Configuring MAC Locking
Configuring Secure Shell (SSH)
Configuring Access Lists
Configuring Denial of Service (DoS) Prevention
Configuring Flow Setup Throttling (FST)
Overview of Security Methods
The following security methods are available for controlling which users are allowed to access,
monitor, and manage the device.
• Local user credentials — used for local authentication and authorization of CLI and WebView
management sessions. For details, refer to "Setting User Accounts and Passwords" on
page 2‐15 and "Setting the Authentication Login Method" on page 25‐50.
• SNMP user or community names — used for authentication and authorization of all SNMP
requests. For details, refer to Chapter
• MAC Locking — locks a port to one or more MAC addresses, preventing connection of
unauthorized devices via the port. For details, refer to "Configuring MAC Locking" on
page 24‐2.
• Secure Shell (SSH) — provides for secure remote CLI management access. For details, refer to
"Configuring Secure Shell (SSH)" on page 24‐11.
• IP Access Lists (ACLs) — permits or denies access to routing interfaces based on protocol and
inbound and/or outbound IP address restrictions configured in access lists. For details, refer to
"Configuring Access Lists" on page 24‐15.
• Policy‐Based Routing — permits or denies access to routing interfaces based on access lists in
a route map applied to the interface. For details, refer to "Configuring Denial of Service (DoS)
Prevention" on page 24‐22.
• Denial of Service (DoS) Prevention — prevents Denial of Service attacks, including land,
fragmented and large ICMP packets, spoofed address attacks, and UDP/TCP port scanning.
For details, refer to "Configuring Denial of Service (DoS) Prevention" on page 24‐22.
Security Configuration
5.
Enterasys Matrix DFE-Gold Series Configuration Guide 24-1
24
Refer to page...
24-1
24-2
24-11
24-15
24-22
24-25