Alteon Application Switch Operating System Application Guide
Securing Alteon
70 Document ID: RDWR-ALOS-V2900_AG1302
Caution: If you configure the TACACS+ secret using any method other than a direct console
connection, the secret may be transmitted over the network as clear text.
3. Optionally, you can change the default TCP port number used to listen to TACACS+.
The well-known port for TACACS+ is 49.
4. Configure the number of retry attempts for contacting the TACACS+ server, and the timeout
period.
5. Apply and save the configuration.
Secure Shell and Secure Copy
The Telnet method for managing Alteon does not provide a secure connection. Secure Shell (SSH)
and Secure Copy (SCP), however, use secure tunnels so that messages between a remote
administrator and Alteon is encrypted and secured.
SSH is a protocol that enables remote administrators to log securely into another computer over a
network to execute management commands.
SCP is typically used to copy files securely from one computer to another. SCP uses SSH for
encryption of data on the network. Alteon uses SCP to download and upload the Alteon configuration
via secure channels.
The Alteon implementation of SSH supports both versions 1.5 and 2.0, and supports SSH clients
version 1.5 to 2.x. The following SSH clients have been tested:
• SSH 1.2.23 and SSH 1.2.27 for Linux (freeware)
• SecureCRT 3.0.2 and SecureCRT 3.0.3 for Windows NT (Van Dyke Technologies, Inc.)
• F-Secure SSH 1.1 for Windows (Data Fellows)
• Putty SSH
• Cygwin OpenSSH
• Mac X OpenSSH
• Solaris 8 OpenSSH
• AxeSSH SSHPro
>> TACACS+ Server# secret
Enter new TACACS+ secret: <1-32 character secret>
>> TACACS+ Server# port Current TACACS+ port: 49
Enter new TACACS+ port [1-65000]: <port number>
>>TACACS+ Server# retries
Current TACACS+ server retries: 3
Enter new TACACS+ server retries [1-3]:
(Server retries)
>> TACACS+ Server# time
Current TACACS+ server timeout: 4
Enter new TACACS+ server timeout [1-15]: 10
(Enter the timeout period in minutes)
To Next Page
Loading...
Need help?
General