Foundry Networks Switch and Router User Manual

December 2000 3 - 1
Chapter 3
Securing Access to Management Functions
This chapter explains how to secure access to management functions on a Foundry device. It contains the
following sections:
•“Securing Access Methods” on page 3-1 lists the management access methods available on a Foundry
device and the ways you can secure each one
•“Restricting Remote Access to Management Functions” on page 3-3 explains how to restrict access to
management functions from remote sources, including Telnet, the Web management interface, and SNMP
•“Setting Passwords” on page 3-9 explains how to set passwords for Telnet access and management privilege
levels
•“Setting Up Local User Accounts” on page 3-12 explains how to define user accounts to regulate who can
access management functions
•“Establishing SNMP Community Strings” on page 3-14 explains how to configure SNMP read-only and read-
write community strings on a Foundry device
•“Configuring TACACS/TACACS+ Security” on page 3-18 explains how to configure TACACS/TACACS+
authentication, authorization, and accounting
•“Configuring RADIUS Security” on page 3-33 explains how to configure RADIUS authentication,
authorization, and accounting
•“Configuring Authentication-Method Lists” on page 3-47 explains how to set the order that authentication
methods are consulted when more than one is used with an access method
Securing Access Methods
The following table lists the management access methods available on a Foundry device, how they are secured
by default, and the ways in which they can be secured.
Table 3.1: Ways to secure management access to Foundry devices
Access method How the access
method is secured
by default
Ways to secure the access method See
page
Serial access to the CLI Not secured Establish passwords for management privilege
levels
3-10

Foundry Networks Switch and Router Specifications

General

Brand	Foundry Networks
Model	Switch and Router
Category	Switch
Language	English