Enterasys Matrix DFE-Gold Series User Manual

Enterasys Matrix DFE-Gold Series Configuration Guide 24-1
24
Security Configuration
ThischapterdescribestheSecurityConfigurationsetofcommandsandhowtousethem.
Overview of Security Methods
Thefollowingsecuritymethodsareavailableforcontrollingwhichusersareallowedtoaccess,
monitor,andmanagethedevice.
•Localusercredentials—usedforlocalauthenticationandauthorizationofCLIandWebView
managementsessions.Fordetails,referto“SettingUserAccountsandPasswords”on
page 2‐15and“Setting
theAuthenticationLoginMethod”onpage 25‐50.
•SNMPuserorcommunitynames—usedforauthenticationandauthorizationofallSNMP
requests.Fordetails,refertoChapter 5.
•MACLocking—locksaporttooneormoreMACaddresses,preventingconnectionof
unauthorizeddevicesviatheport.Fordetails,referto
“ConfiguringMACLocking”on
page 24‐2.
•SecureShell(SSH)—providesforsecureremoteCLImanagementaccess.Fordetails,referto
“ConfiguringSecureShell(SSH)”onpage 24‐11.
•IPAccessLists(ACLs)—permitsordeniesaccesstoroutinginterfacesbasedonprotocoland
inboundand/oroutboundIPaddress
restrictionsconfiguredinaccesslists.Fordetails,referto
“ConfiguringAccessLists”onpage 24‐15.
•Policy‐BasedRouting—permitsordeniesaccesstoroutinginterfacesbasedonaccesslistsin
aroutemapappliedtotheinterface.Fordetails,referto“ConfiguringDenialofService(DoS)
Prevention”on
page 24‐22.
•DenialofService(DoS)Prevention—preventsDenialofServiceattacks,includingland,
fragmentedandlargeICMPpackets,spoofedaddressattacks,andUDP/TCPportscanning.
Fordetails,referto“ConfiguringDenialofService(DoS)Prevention”onpage 24‐22.
For information about... Refer to page...
Overview of Security Methods 24-1
Configuring MAC Locking 24-2
Configuring Secure Shell (SSH) 24-11
Configuring Access Lists 24-15
Configuring Denial of Service (DoS) Prevention 24-22
Configuring Flow Setup Throttling (FST) 24-25

Enterasys Matrix DFE-Gold Series Specifications

General

Brand	Enterasys
Model	Matrix DFE-Gold Series
Category	Switch
Language	English