beautypg.com

Restricting remote access to management functions – Brocade Virtual ADX Administration Guide (Supporting ADX v03.1.00) User Manual

Page 70

background image

58

Brocade Virtual ADX Administration Guide

53-1003249-01

Restricting remote access to management functions

2

Restricting remote access to management functions

You can restrict access to management functions from remote sources, including Telnet, the Web
Management Interface, and SNMP. The following methods for restricting remote access are
supported:

Allowing remote access only from specific IP addresses

Allowing remote access only to clients connected to a specific VLAN

Specifically disabling Telnet or Web Management Interface access to the device

The following sections describe how to restrict remote access to a Brocade Virtual ADX using these
methods.

Web management
access

SNMP read or read-write
community strings

Allow Web management access only from
specific IP addresses

page 59

Allow Web management access only to
clients connected to a specific VLAN

page 60

Disable Web management access

page 61

Set up local user accounts

page 67

Establish SNMP read or read-write
community strings for SNMP versions 1
and 2

page 100

Establishing user groups for SNMP
version 3

Configure TACACS or TACACS+ security

page 69

Configure RADIUS security

page 85

SNMP access

SNMP read or read-write
community strings and the
password to the Super
User privilege level
NOTE: SNMP read or

read-write
community strings
are always
required for SNMP
access to the
device.

Allow SNMP access only from specific IP
addresses

page 59

Allow SNMP access only to clients
connected to a specific VLAN

page 60

Establish passwords to management
levels of the CLI

page 63

Set up local user accounts

page 67

Establish SNMP read or read-write
community strings

page 69

TFTP access

Not secured

Allow TFTP access only to clients
connected to a specific VLAN

page 60

TABLE 5

Ways to secure management access to Brocade Virtual ADX devices (Continued)

Access method

How the access method is
secured by default

Ways to secure the access method

See page