Securing Access to Management Functions
December 2000 3 - 3
Restricting Remote Access to Management Functions
You can restrict access to management functions from remote sources, including Telnet, the Web management
interface, and SNMP. The following methods for restricting remote access are supported:
• Using ACLs to restrict Telnet, Web management interface, or SNMP access
• Allowing remote access only from specific IP addresses
• Allowing remote access only to clients connected to a specific VLAN
• Specifically disabling Telnet, Web management interface, or SNMP access to the device
The following sections describe how to restrict remote access to a Foundry device using these methods.
Web management access SNMP read or read-
write community
strings
Regulate Web management access using
ACLs
3-4
Allow Web management access only from
specific IP addresses
3-6
Allow Web management access only to clients
connected to a specific VLAN
3-7
Disable Web management access 3-7
Set up local user accounts 3-12
Establish SNMP read or read-write community
strings
3-14
Configure TACACS/TACACS+ security 3-18
Configure RADIUS security 3-33
SNMP (IronView) access SNMP read or read-
write community
strings and the
password to the Super
User privilege level
Note: SNMP read or
read-write community
strings are always
required for SNMP
access to the device.
Regulate SNMP access using ACLs 3-5
Allow SNMP access only from specific IP
addresses
3-6
Disable SNMP access 3-8
Allow SNMP access only to clients connected
to a specific VLAN
3-7
Establish passwords to management levels of
the CLI
3-10
Set up local user accounts 3-12
Establish SNMP read or read-write community
strings
3-14
TFTP access Not secured Allow TFTP access only to clients connected
to a specific VLAN
3-7
Table 3.1: Ways to secure management access to Foundry devices (Continued)
Access method How the access
method is secured
by default
Ways to secure the access method See
page
To Next Page
Loading...
Need help?
General
