Table of Contents
Advertisement
Secure Sensitive Data
SSD Management Channels
SSD Management Channels
Menu CLI and Password Recovery
Cisco Small Business 200 Series Smart Switch Administration Guide
Devices can be managed over management channels such as telnet, SSH, and
web. SSD categories the channels into the following types based on their security
and/or protocols: secured, insecure, secure-XML-SNMP, and insecure-XML-SNMP.
The following describes whether SSD considers each management channel to be
secure or insecure. If it is insecure, the table indicates the parallel secure channel.
Security of Management Channels
Management Channels
Management Channel
GUI/HTTP
GUI/HTTPS
XML/HTTP
XML/HTTPS
TFTP
HTTP based file transfer
HTTPS based file transfer
The Menu CLI interface is only allowed to users if their read permissions are Both
or Plaintext Only. Other users are rejected. Sensitive data in the Menu CLI is always
displayed as plaintext.
Password recovery is currently activated from the boot menu and allows the user
to log on to the terminal without authentication. If SSD is supported, this option is
only permitted if the local passphrase is identical to the default passphrase. If a
device is configured with a user-defined passphrase, the user is unable to activate
password recovery.
SSD Management
Channel Type
Insecure
Secure
Insecure-XML-
SNMP
Secure-XML-SNMP
Insecure
Insecure
Secure
19
Parallel Secured
Management Channel
GUI/HTTPS
XML/HTTPS
HTTPS-based file transfer
267
Hide quick links:
Advertisement
Table of Contents
