Commands
aaa authorization commands <privilege-level> default
radius | none
aaa authorization exec default radius | none
enable aaa console
radius-server host <ip-addr> | <server-name> [auth-port
<number> acct-port <number> [authentication-only |
authorization-only | accounting-only | default] [key
<string>]]
radius-server key [0 | 1] <string>
radius-server retransmit <number>
radius-server timeout <number>
show aaa
SNMP access
Commands
snmp-client <ip-addr>
snmp-server community <string>
ro | rw <standard-acl-name> | <standard-acl-id>
snmp-server enable vlan <vlan-id>
snmp-server enable
SSH access
Commands
ip ssh client <ip-addr>
ssh access-group <num> | <name>
SSL
Commands
crypto-ssl certificate generate
crypto-ssl certificate zeroize
ip ssl certificate-data-file tftp <ip-addr>
<certificate-filename>
BigIron RX Series Configuration Guide
53-1001986-01
Security/Management
See ...
"Configuring command authorization"
"Configuring Exec authorization"
"Command authorization and accounting for console
commands"
on page 110
"Identifying the RADIUS server to the BigIron RX"
page 105
"Specifying different servers for individual AAA
functions"
on page 106
"Setting the RADIUS key"
on page 106
"Setting the retransmission limit"
"Setting the timeout parameter"
"Displaying RADIUS configuration information"
page 112
See ...
"Restricting SNMP access to a specific IP address"
on page 69
"Using ACLs to restrict SNMP access"
"Restricting SNMP access to a specific VLAN"
page 70
"Disabling SNMP access"
on page 72
See ...
"Restricting SSH access to a specific IP address"
page 68
"Using ACLs to restrict SNMP access"
See ...
"Generating an SSL certificate"
"Deleting the SSL certificate"
"Importing digital certificates and RSA private key
files"
on page 83
E
on page 109
on page 109
on
on page 91
on page 107
on
on page 67
on
on
on page 67
on page 84
on page 84
1337