Preventing Unauthorized Access To Your Switch - Cisco IE 3000 Software Configuration Manual
Hide thumbs
Also See for IE 3000:
- Hardware installation manual (186 pages) ,
- Getting started manual (32 pages) ,
- Software configuration manual (874 pages)
Table of Contents
Advertisement
Configuring Switch-Based Authentication
This chapter describes how to configure switch-based authentication on the IE 3000 switch. It consists
of these sections:
•
•
•
•
•
•
•
•
Preventing Unauthorized Access to Your Switch
You can prevent unauthorized users from reconfiguring your switch and viewing configuration
information. Typically, you want network administrators to have access to your switch while you restrict
access to users who dial from outside the network through an asynchronous port, connect from outside
the network through a serial port, or connect through a terminal or workstation from within the local
network.
To prevent unauthorized access into your switch, you should configure one or more of these security
features:
•
•
OL-13018-01
Preventing Unauthorized Access to Your Switch, page 9-1
Protecting Access to Privileged EXEC Commands, page 9-2
Controlling Switch Access with TACACS+, page 9-10
Controlling Switch Access with RADIUS, page 9-17
Configuring the Switch for Local Authentication and Authorization, page 9-32
Configuring the Switch for Secure Shell, page 9-33
Configuring the Switch for Secure Socket Layer HTTP, page 9-37
Configuring the Switch for Secure Copy Protocol, page 9-44
At a minimum, you should configure passwords and privileges at each switch port. These passwords
are locally stored on the switch. When users attempt to access the switch through a port or line, they
must enter the password specified for the port or line before they can access the switch. For more
information, see the
"Protecting Access to Privileged EXEC Commands" section on page
For an additional layer of security, you can also configure username and password pairs, which are
locally stored on the switch. These pairs are assigned to lines or ports and authenticate each user
before that user can access the switch. If you have defined privilege levels, you can also assign a
specific privilege level (with associated rights and privileges) to each username and password pair.
For more information, see the
C H A P T E R
"Configuring Username and Password Pairs" section on page
Cisco IE 3000 Switch Software Configuration Guide
9
9-2.
9-6.
9-1
Advertisement
Chapters
Table of Contents
Troubleshooting
