Brocade Multi-Service IronWare Security Configuration Guid Uživatelský manuál stáhnout pdf (Strana 23)

Multi-Service IronWare Security Configuration Guide 5

53-1003035-02

Securing access methods

SNMP (Brocade Network

Advisor) access

SNMP read or

read-write community

strings and the

password to the

Super User privilege

level

NOTE: SNMP read or

read-write

community

strings are

always

required for

SNMP access

to the device.

SNMP access is

disabled by default.

Regulate SNMP access using ACLs

Allow SNMP access only from specific IP

addresses

Disable SNMP access

Allow SNMP access only to clients

connected to a specific VLAN

Establish passwords to management levels

of the CLI

Set up local user accounts

Configure AAA command for SNMP access

Establish SNMP read or read-write

community strings

TFTP access Not secured Allow TFTP access only to clients connected

to a specific VLAN

Secure Copy access Secured access if

SSH server is enabled

Configure DSA or RSA host keys

Disable SSH server.

Password Authentication

Public key authentication using client's

public key

(excludes use of username and password

credentials)

Regulate SSH access using ACLs

Allow SSH access only from specific IP

addresses

Establish passwords for privilege levels of

the CLI

Set up local user accounts

Configure TACACS or TACACS+ security

Configure RADIUS security

TABLE 3 Ways to secure management access to the Brocade devices (Continued)

Access method How the access method

is secured by default

Ways to secure the access method

1 2 ... 18 19 20 21 22 23 24 25 26 27 28 ... 369 370

Komentáře k této Příručce

Žádné komentáře

Brocade Multi-Service IronWare Security Configuration Guid Uživatelský manuál Strana 23

Komentáře k této Příručce

Související produkty a manuály pro Počítačové příslušenství Brocade Multi-Service IronWare Security Configuration Guid