Safe Defaults Setup Method; Configuring Management Access - Extreme Networks ExtremeWare XOS Guide Manual

Safe Defaults Setup Method

Once you connect to the console port of the switch, or after you issue the
configure safe-default-script
Telnet is enabled by default. Telnet is unencrypted and has been the target of
security exploits in the past.
Would you like to disable Telnet? [y/N]: No
SNMP access is enabled by default. SNMP uses no encryption, SNMPv3 can be
configured to eliminate this problem.
Would you like to disable SNMP? [y/N]: No
All ports are enabled by default. In some secure applications, it maybe more
desirable for the ports to be turned off.
Would you like unconfigured ports to be turned off by default? [y/N]: No
Since you have chosen less secure management methods, please remember to
increase the security of your network by taking the following actions:
* change your admin password
* change your SNMP public and private strings
* consider using SNMPv3 to secure network management traffic
All the changes you make using this interactive script can be saved through switch reboots, if you save
the setting. If you want to change the management access:
Issue the
●
configure safe-default-script
the script
Issue the
●
unconfigure switch all
and reruns this script
You see this interactive script only under the following conditions:
Initial login (when you use the switch the first time)
●
After
●
unconfigure switch all
After
●
configure safe-default-script

Configuring Management Access

ExtremeWare XOS supports the following two levels of management:
User
●
Administrator
●
In addition to the management levels, you can optionally use an external RADIUS server to provide CLI
command authorization checking for each command. For more information on RADIUS, see
ExtremeWare XOS 11.3 Concepts Guide
CLI command, the system returns the following interactive script:
command—maintains your configuration and reruns
command—resets your switch to the default factory setting
CLI command
command

Configuring Management Access

unconfigure switch all
Chapter
or
16.
47