C
HAPTER
4
| Configuring the Switch
Configuring Security
– 70 –
CONFIGURING SECURITY
You can configure this switch to authenticate users logging into the system
for management access or to control client access to the data ports.
Management Access Security – Management access to the switch can be
controlled through local authentication of user names and passwords
stored on the switch, or remote authentication of users via a RADIUS or
TACACS+ server. Additional authentication methods includes Secure Shell
(SSH), Secure Hypertext Transfer Protocol (HTTPS) over the Secure Socket
Layer (SSL), static configuration of client addresses, and SNMP.
General Security Measures – This switch supports many methods of
segregating traffic for clients attached to each of the data ports, and for
ensuring that only authorized clients gain access to the network. Private
VLANs and port-based authentication using IEEE 802.1X are commonly
used for these purposes. In addition to these methods, several other
options of providing client security are supported by this switch. These
include limiting the number of users accessing a port. The addresses
assigned to DHCP clients can also be carefully controlled using static or
dynamic bindings with DHCP Snooping and IP Source Guard commands.
ARP Inspection can also be used to validate the MAC address bindings for
ARP packets, providing protection against ARP traffic with invalid MAC to IP
address bindings, which forms the basis for “man-in-the-middle” attacks.
CONFIGURING USER
ACCOUNTS
Use the User Configuration page to control management access to the
switch based on manually configured user names and passwords.
CLI REFERENCES
◆ "User Configuration" on page 312
COMMAND USAGE
◆ The default administrator name is “admin” with no password.
◆ The administrator has write access for all parameters governing the
onboard agent. You should therefore assign a new administrator
password as soon as possible, and store it in a safe place.
PARAMETERS
These parameters are displayed in the web interface:
◆ User Name – The name of the user.
(Maximum length: 8 characters; maximum number of users: 16)
◆ Password – Specifies the user password.
(Range: 0-8 characters plain text, case sensitive)
◆ Password (again) – Re-type the string entered in the previous field to
ensure no errors were made. The switch will not change the password if
these two fields do not match.
To Next Page
