12 Contents
9 Controlling Management Access . . . . . 169
Management Access Control Overview. . . . . . . . 169
What Are the Recommendations for
Management Security? . . . . . . . . . . . . . . 171
What Is an Authentication Profile?
. . . . . . . . 171
How Does TACACS+ Control Management
Access?
. . . . . . . . . . . . . . . . . . . . . . 172
How Does RADIUS Control Management
Access?
. . . . . . . . . . . . . . . . . . . . . . 174
What are RADIUS Server Groups?
. . . . . . . . 176
How Does the Switch Determine Which
RADIUS Server to Contact?
. . . . . . . . . . . . 176
What Other Features Use Authentication? . . . . 178
Default Management Security Values. . . . . . . . . 178
Controlling Management Access (Web) . . . . . . . 180
Access Profile
. . . . . . . . . . . . . . . . . . 180
Authentication Profiles . . . . . . . . . . . . . . 184
Select Authentication. . . . . . . . . . . . . . . 187
Password Management . . . . . . . . . . . . . 188
Last Password Set Result. . . . . . . . . . . . . 190
User Login Configuration . . . . . . . . . . . . . 191
Local User Database . . . . . . . . . . . . . . . 192
Line Password
. . . . . . . . . . . . . . . . . . 194
Enable Password . . . . . . . . . . . . . . . . . 194
TACACS+ Settings
. . . . . . . . . . . . . . . . 195
RADIUS Global Configuration
. . . . . . . . . . . 197
RADIUS Server Configuration . . . . . . . . . . 198
RADIUS Accounting Server Configuration . . . . 200
RADIUS Accounting Server Statistics
. . . . . . 202
RADIUS Server Statistics
. . . . . . . . . . . . . 203
Authorization Network RADIUS . . . . . . . . . 204
Telnet Server . . . . . . . . . . . . . . . . . . . 205
Denial of Service
. . . . . . . . . . . . . . . . . 206