Restricting Remote Access To Management Functions - Foundry Networks Switch and Router Installation And Configuration Manual

Table 3.1: Ways to secure management access to Foundry devices (Continued)
Access method
Web management access
SNMP (IronView) access
TFTP access

Restricting Remote Access to Management Functions

You can restrict access to management functions from remote sources, including Telnet, the Web management
interface, and SNMP. The following methods for restricting remote access are supported:
• Using ACLs to restrict Telnet, Web management interface, or SNMP access
• Allowing remote access only from specific IP addresses
• Allowing remote access only to clients connected to a specific VLAN
• Specifically disabling Telnet, Web management interface, or SNMP access to the device
The following sections describe how to restrict remote access to a Foundry device using these methods.
December 2000
How the access Ways to secure the access method
method is secured
by default
SNMP read or read- Regulate Web management access using
write community ACLs
strings
Allow Web management access only from
specific IP addresses
Allow Web management access only to clients
connected to a specific VLAN
Disable Web management access
Set up local user accounts
Establish SNMP read or read-write community
strings
Configure TACACS/TACACS+ security
Configure RADIUS security
SNMP read or read- Regulate SNMP access using ACLs
write community
Allow SNMP access only from specific IP
strings and the
addresses
password to the Super
User privilege level
Disable SNMP access
Note: SNMP read or
Allow SNMP access only to clients connected
read-write community
to a specific VLAN
strings are always
required for SNMP
Establish passwords to management levels of
access to the device.
the CLI
Set up local user accounts
Establish SNMP read or read-write community
strings
Not secured Allow TFTP access only to clients connected
to a specific VLAN
Securing Access to Management Functions
See
page
3-4
3-6
3-7
3-7
3-12
3-14
3-18
3-33
3-5
3-6
3-8
3-7
3-10
3-12
3-14
3-7
3 - 3