beautypg.com

Configuring access control, Enabling configuration of radius, Enabling configuration of tacacs or tacacs – Brocade Virtual ADX Administration Guide (Supporting ADX v03.1.00) User Manual

Page 46

background image

34

Brocade Virtual ADX Administration Guide

53-1003249-01

Configuring access control

1

Configuring access control

This section contains information on configuring access control.

Enabling configuration of RADIUS

To enable users of IronView or other SNMP management applications to configure RADIUS
authentication parameters on the Brocade Virtual ADX, enter the following command.

Virtual ADX(config)#enable snmp config-radius

Syntax: [no] enable snmp config-radius

Enabling configuration of TACACS or TACACS+

To enable users of IronView or other SNMP management applications to configure TACACS or
TACACS+ authentication parameters on the Brocade Virtual ADX.

Virtual ADX(config)#enable snmp config-tacacs

Syntax: [no] enable snmp config-tacacs

Restricting management access to the Brocade Virtual ADX

You can restrict management access to the Brocade Virtual ADX. No other host except the one with
the IP address you specify can access the Brocade Virtual ADX through Telnet (CLI), the Web (Web
Management Interface), or SNMP (IronView). Replace the ip-addr variable with a valid IP address.
You can enter one IP address with the command, but you can issue the command up to ten times
for up to ten IP addresses.

If you want to restrict access for some of the management platforms but not all of them, use one or
two of the following commands:

snmp-client – restricts IronView access and all other SNMP access.

telnet client – restricts Telnet access.

web client – restricts web access.

To restrict management access to the Brocade Virtual ADX, enter the following command.

Virtual ADX(config)#all-client 10.157.22.26

Syntax: [no] all-client ip-addr

Determining the access points where the password
can be defined

To define the access points from which the system password can be defined, enter a command
such as the following.

Virtual ADX(config)#password-change cli

Syntax: [no] password-change [any | cli | console-cli | telnet-cli]