Alcatel OmniSwitch/Router Guía de usuario descargar pdf (Pagina 279)

Managing Switch Security Setting Up Management Interfaces for ASA

OmniSwitch 6250/6450 Switch Management Guide May 2012 page 10-9

Setting Up Management Interfaces for ASA

By default, authenticated access is available through the console port. Access through other management

interfaces is disabled. Other management interfaces include Telnet, FTP, HTTP, Secure Shell, and SNMP.

This chapter describes how to set up access for management interfaces. For more details about particular

management interfaces and how they are used, see Chapter 2, “Logging Into the Switch.”

To give switch access to management interfaces, use the aaa authentication command to allow or deny

access to each interface type; the default keyword can be used to configure access for all interface types.

Specify the server(s) to be used for authentication through the indicated management interface.

Keywords used for specifying management interfaces are listed here:

ssh is the keyword used to specify Secure Shell.

To specify an external authentication server or servers, use the RADIUS or LDAP server name or the

keyword ace for an ACE/Server. To specify that the local user database must be used for authentication,

use the local keyword. Up to four servers can be specified.

RADIUS and LDAP servers are set up to communicate with the switch via the aaa radius-server and

aaa tacacs+-server commands. ACE/Servers do not require any configuration, but you must FTP the

sdconf.rec file from the server to the switch’s network directory. For more information about configur-

ing the switch to communicate with these servers, see the “Managing Authentication Servers” chapter of

the OmniSwitch 6250/6450 Network Configuration Guide.

Note. RADIUS or LDAP servers used for authenticated switch access can also be used with authenticated

VLANs. Authenticated VLANs are described in the “Configuring Authenticated VLANs” chapter of the

OmniSwitch 6250/6450 Network Configuration Guide.

The order of the specified servers is important. The switch uses only one server for authentication—the

first available server in the list. All authentication attempts will be tried on that server. Other servers are

not tried, even if they are available. If local is specified, it must be last in the list since the local user data-

base is always available when the switch is up.

Servers can also be used for accounting, or logging, of authenticated sessions. See “Configuring Account-

ing for ASA” on page 10-12.

The following table describes the management access interfaces or methods and the types of authentica-

tion servers that can be used with them:

keywords

console

telnet

ftp

http

ssh

snmp

default

Server Type Management Access Method

RADIUS Telnet, FTP, HTTP, Secure Shell

LDAP Telnet, FTP, HTTP, Secure Shell, SNMP

ACE/Server Telnet, FTP, HTTP, Secure Shell

local console, FTP, HTTP, Secure Shell, SNMP

1 2 ... 274 275 276 277 278 279 280 281 282 283 284 ... 345 346

Comentarios a estos manuales

Sin comentarios

Alcatel OmniSwitch/Router Guía de usuario Pagina 279

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Alcatel OmniSwitch/Router