Brocade FastIron Ethernet Switch Security Configuration Guide - Manual (Page 392)

changing a local user password 41
configuring 36
configuring password history 38
enabling user password aging 38
enabling user password masking 37
enhanced login lockout 39
recovering from a lost password 34
setting a Telnet password 32
setting for management privilege levels 32
setting to expire 39
specifying a minimum password length 35
passwords, used to secure access 31
policy-based routing (PBR)
basic example 149
enabling 148
setting the next hop 149
setting the output interface 150
trunk formation 151
Port Security
autosave 221
privilege-level> 55
privilege levels 33
Q
QoS
options for IP ACLs 135
R
RADIUS
AAA operationssecurity
AAA operations for RADIUS 59
accounting configuration 59
authentication, authorization, and accounting
(AAA)
58
authentication configuration 58
authentication-method list examples 76
authentication-method lists 75
authentication method values 67
authorization configuration 58
Brocade-specific attributes on the server 62
command authorization and accounting for
console commands
71
configuration 61
configuration considerations 61
configuring accounting for CLI commands 71
configuring accounting for system events 72
configuring accounting for Telnet/SSH (Shell)
access
71
configuring an interface as the source for all
packets
72
configuring command authorization 70
configuring enable authentication 69
displaying configuration information 72
entering privileged EXEC mode 69
identifying the server to the Brocade device 64
servers per port 64
setting authentication-method lists 67
setting over IPv6 67
setting the key 66
setting the retransmission limit 67
setting the timeout parameter 67
specifying different servers for individual AAA
functions
64
RADIUS authorization 69
RADIUS parameters 66
RADIUS security 58
RADIUS server
generic attributes 232
remote access restrictions 25
restricting
SNMP access to a specific VLAN 28
snmp-server enable vlan 28
SSH connection 27
Telnet access to a specific VLAN 28
Telnet connection 26
TFTP access to a specific vlan 29
restricting access to device based on IP or MAC
address
26
restrict mode access
using ACL 23
route map
configuring 147
RSA authentication
392 FastIron Ethernet Switch Security Configuration Guide
53-1003088-03