monitoring (continued)
VLAN 140
maps 140
filters 140
multicast packets 153
ACLs on 153
multiple UDP ports 65
N
non-IP traffic filtering 132
O
operation of 41, 54
overview 19, 24, 39, 53
P
password and privilege level 22
password recovery disable considerations 27
passwords 19, 22, 24, 25, 27, 28, 30
default configuration 22
disabling recovery of 27
encrypting 25
overview 19
setting 24, 25, 28, 30
enable 24
enable secret 25
Telnet 28
with usernames 30
persistent self-signed certificate 94
port ACLs 108, 109
defined 108
types of 109
port security 187
port-based authentication 302, 310, 311, 315, 316, 323
configuration guidelines 311
configuring 315, 316
RADIUS server 316
RADIUS server parameters on the switch 315
default configuration 310
device roles 302
displaying statistics 323
enabling 315
802.1X authentication 315
switch 302
as proxy 302
preventing unauthorized access 19
private VLANs 187
privilege levels 24, 31, 32, 33
changing the default for lines 32
exiting 33
logging into 33
overview 24
setting a command with 31
Protecting Enable and Enable Secret Passwords with
Encryption 35
Example command 35
R
RADIUS 53, 54, 62, 65, 66, 68, 71, 72, 73, 75, 80
attributes 75, 80
vendor-proprietary 75, 80
vendor-specific 75
configuring 65, 66, 71, 72, 73
accounting 72
authentication 66
authorization 71
communication, global 65, 73
communication, per-server 65
multiple UDP ports 65
default configuration 62
defining AAA server groups 68
identifying the server 65
key 65
limiting the services to the user 71
login 66
operation of 54
overview 53
suggested network environments 53
tracking services accessed by user 72
RADIUS Change of Authorization 55
Remote Authentication Dial-In User Service 53
See RADIUS 53
restricting access 19, 39, 53
overview 19
RADIUS 53
TACACS+ 39
RFC 5176 Compliance 56
routed packets, ACLs on 152
routed ports 187
router ACLs 108, 110
defined 108
types of 110
S
SCP 88
and SSH 88
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
IN-4 OL-29434-01
Index
To Next Page
Loading...
