Securing Access To Management Functions; Securing Access Methods - Foundry Networks Switch and Router Installation And Configuration Manual

Securing Access to Management Functions

This chapter explains how to secure access to management functions on a Foundry device. It contains the
following sections:
• "Securing Access Methods" on page 3-1 lists the management access methods available on a Foundry
device and the ways you can secure each one
• "Restricting Remote Access to Management Functions" on page 3-3 explains how to restrict access to
management functions from remote sources, including Telnet, the Web management interface, and SNMP
• "Setting Passwords" on page 3-9 explains how to set passwords for Telnet access and management privilege
levels
• "Setting Up Local User Accounts" on page 3-12 explains how to define user accounts to regulate who can
access management functions
• "Establishing SNMP Community Strings" on page 3-14 explains how to configure SNMP read-only and read-
write community strings on a Foundry device
• "Configuring TACACS/TACACS+ Security" on page 3-18 explains how to configure TACACS/TACACS+
authentication, authorization, and accounting
• "Configuring RADIUS Security" on page 3-33 explains how to configure RADIUS authentication,
authorization, and accounting
• "Configuring Authentication-Method Lists" on page 3-47 explains how to set the order that authentication
methods are consulted when more than one is used with an access method

Securing Access Methods

The following table lists the management access methods available on a Foundry device, how they are secured
by default, and the ways in which they can be secured.
Table 3.1: Ways to secure management access to Foundry devices
Access method
Serial access to the CLI
December 2000
How the access
method is secured
by default
Not secured
Ways to secure the access method
Establish passwords for management privilege
levels
Chapter 3
See
page
3-10
3 - 1