Configuring Standard Security Features; User-Defined Accounts - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

Configuring Standard Security Features

In this chapter

User-defined accounts

In addition to the default accounts-root, factory, admin, and user-Fabric OS v7.0.0 and later
support up to 256 user-defined accounts in each logical switch (domain). These accounts expand
your ability to track account access and audit administrative activities.
When the Virtual Fabrics capability is enabled, each user-defined account is associated with the
following:
•
•
•
Access rights for any user session are determined by the user's role-based access rights. Refer to
Chapter 1, "Introducing Web Tools"
(RBAC).
Web Tools Administrator's Guide
53-1002756-01
•
User-defined accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
•
User-defined roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
•
Access control list policy configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
•
Fabric-Wide Consistency Policy configuration . . . . . . . . . . . . . . . . . . . . . . . 177
•
Authentication policy configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
•
SNMP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
•
RADIUS management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
•
Active Directory service management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185
•
TACACS+ management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
•
IPsec concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
•
IPsec over management ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
•
Establishing authentication policies for HBAs . . . . . . . . . . . . . . . . . . . . . . . 200
Virtual Fabric ID-Specifies the accessible Virtual Fabrics for a user account.
Home Virtual Fabric-Specifies the default Virtual Fabric for a user account.
Role-Determines functional access levels within the Virtual Fabric.
for additional information about Role-Based Access Control
Chapter
15
163