Cisco Systems SF300-24P Instrukcja Użytkownika Strona 325
- Strona / 483
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Security
Configuring TACACS+
Cisco Small Business 300 Series Managed Switch Administration Guide 308
17
Defaults
The following defaults are relevant to this feature:
• No default TACACS+ server is defined by default.
• If you configure a TACACS+ server, the accounting feature is disabled by
default.
Interactions With Other Features
You cannot enable accounting on both a RADIUS and TACACS+ server.
Workflow
To use a TACACS+ server, do the following:
STEP 1 Open an account for a user on the TACACS+ server.
STEP 2 Configure that server along with the other parameters in the TACACS+ and Add
TACAC S + Se r ver page s .
STEP 3 Select TACACS+ in the Management Access Authentication page, so that when a
user logs onto the device, authentication is performed on the TACACS+ server
instead of in the local database.
NOTE If more than one TACACS+ server has been configured, the device uses the
configured priorities of the available TACACS+ servers to select the TACACS+
server to be used by the device.
Configuring a TACACS+ Server
The TACACS+ page enables configuring TACACS+ servers.
Only users who have privilege level 15 on the TACACS+ server can administer the
device. Privilege level 15 is given to a user or group of users on the TACACS+
server by the following string in the user or group definition:
service = exec {
priv-lvl = 15
}
To configure TACACS+ server parameters:
- ADMINISTRATION 1
- Chapter 1: Getting Started 1 2
- Chapter 10: Smartport 144 5
- Chapter 13: Spanning Tree 218 8
- Chapter 15: Multicast 236 8
- Contents 10
- Chapter 17: Security 302 10
- Chapter 23: SNMP 446 15
- Getting Started 18
- Logging In 19
- HTTP/HTTPS 20
- Password Expiration 20
- Logging Out 21
- Interface Naming Conventions 23
- Window Navigation 24
- Management Buttons 26
- Status and Statistics 29
- Viewing Etherlike Statistics 30
- Viewing GVRP Statistics 32
- Viewing 802.1X EAP Statistics 33
- Viewing TCAM Utilization[ 34
- Managing RMON 35
- Configuring RMON History 37
- Defining RMON Events Control 39
- Viewing the RMON Events Logs 41
- Defining RMON Alarms 41
- Administration: System Log 45
- Setting System Log Settings 46
- Viewing Memory Logs 48
- RAM Memory 49
- Flash Memory 49
- System Files 51
- Files and File Types 52
- File Actions 53
- Active Image 58
- Copy/Save Configuration 65
- DHCP Server Options 67
- Auto Configuration Process 68
- Web Configuration 70
- Device Models 73
- System Information 75
- System Information: 76
- Rebooting the Device 79
- Routing Resources 81
- Monitoring Fan Status 82
- Pinging a Host 84
- Traceroute 86
- Administration: Time Settings 89
- System Time Options 90
- SNTP Modes 91
- Configuring System Time 92
- Adding a Unicast SNTP Server 94
- In Process 95
- Configuring the SNTP Mode 97
- Defining SNTP Authentication 97
- Time Range 98
- Absolute Time Range 99
- Recurring Time Range 100
- Administration: Diagnostics 101
- MSA-compatible SFPs 103
- STEP 3 Enter the parameters: 105
- Administration: Discovery 109
- LLDP and CDP 111
- Configuring LLDP 112
- LLDP Overview 113
- Setting LLDP Properties 114
- Editing LLDP Port Settings 115
- LLDP MED Network Policy 117
- Displaying LLDP Port Status 120
- Management Address 122
- MAC/PHY Details 122
- 802.3 Details 123
- 802.3 Link Aggregation 123
- MED Details 123
- Location Information 124
- Network Policy Table 124
- Port Details 125
- Basic Details 126
- Management Address Table 126
- 802.3 Power via MDI 127
- 802.1 VLAN and Protocol 128
- PPVID Table 128
- Accessing LLDP Statistics 129
- LLDP Overloading 130
- Configuring CDP 132
- CDP Configuration Workflow 133
- Viewing CDP Statistics 140
- Port Management 141
- Setting Port Configuration 142
- is disabled 143
- Configuring Link Aggregation 145
- Link Aggregation Overview 146
- Defining LAG Management 148
- Configuring LAG Settings 149
- Configuring LACP 151
- Configuring Green Ethernet 153
- 802.3az EEE Overview 155
- 802.3az EEE 156
- Smartport 161
- Overview 162
- What is a Smartport 163
- Smartport Types 163
- Special Smartport Types 165
- Smartport Macros 166
- Auto Smartport 169
- Error Handling 172
- Default Configuration 173
- Compatibility 173
- Common Smartport Tasks 173
- Smartport Properties 176
- Smartport Type Settings 177
- Smartport Interface Settings 178
- Port Type 179
- Unknown 179
- Built-in Smartport Macros 181
- Port Management: PoE 193
- PoE Operation 194
- PoE on the Device 195
- Configuring PoE Properties 196
- Configuring PoE Settings 197
- VLAN Management 201
- VLAN Description 202
- VLAN Roles 203
- VLAN Configuration Workflow 204
- STEP 3 Click Apply 205
- Creating VLANs 206
- Defining VLAN Membership 208
- Configuring Port to VLAN 209
- Configuring VLAN Membership 210
- GVRP Settings 211
- VLAN Groups 212
- MAC-based Groups 213
- Voice VLAN 215
- Dynamic Voice VLAN Modes 216
- Voice End-Points 217
- Defaults 217
- Voice VLAN Triggers 217
- Auto Voice VLAN 218
- Voice VLAN QoS 219
- Voice VLAN Constraints 220
- Voice VLAN Workflows 220
- Configuring Voice VLAN 221
- Configuring Telephony OUI 225
- Access Port Multicast TV VLAN 228
- IGMP Snooping 229
- Configuration 230
- Multicast TV Group to VLAN 230
- Workflow 232
- STEP 2 Click Add 233
- Spanning Tree 235
- STEP 2 Enter the parameters 236
- Multiple Spanning Tree 243
- Defining MSTP Properties 243
- Boundary 247
- Managing MAC Address Tables 249
- STEP 3 Enter the parameters 250
- Querying Dynamic Addresses 251
- Multicast 253
- Typical Multicast Setup 254
- Multicast Forwarding 255
- Defining Multicast Properties 256
- Adding MAC Group Address 258
- Configuring IGMP Snooping 261
- STEP 4 Enter the parameters 263
- MLD Snooping 264
- STEP 2 Define the following: 270
- IP Configuration 271
- Layer 2 IP Addressing 272
- IPv4 Interface 273
- Administration 275
- File Management 275
- DHCP Auto Configuration 275
- Dynamic IP Address 276
- Static IP Address 276
- IPv4 Routes 277
- Normal Age Out 278
- ARP Proxy 279
- UDP Relay/IP Helper 280
- DHCPv4 Snooping/Relay 280
- DHCPv4 Relay 281
- DHCPv4 in Layer 2 and Layer 3 281
- Transparent DHCP Relay 281
- Option 82 281
- DHCP Trusted Ports 287
- DHCP Default Configuration 289
- Configuring DHCP Work Flow 289
- DHCP Snooping/Relay 290
- Interface Settings 291
- STEP 3 Enter the fields: 292
- DHCP Server 293
- Dependencies Between Features 295
- DHCPv4 Server 296
- Network Pool 296
- Excluded Addresses 298
- Static Hosts 298
- Address Binding 300
- IPv6 Global Configuration 302
- IPv6 Interface 302
- DHCPv6 Client Details 304
- IPv6 Tunnel 305
- Configuring Tunnels 306
- Defining IPv6 Addresses 307
- IPv6 Default Router List 308
- Reachable 309
- Reachable Time 309
- Delay Time 309
- Incomplete 310
- Viewing IPv6 Route Tables 311
- DHCPv6 Relay 313
- Domain Name 314
- DNS Settings 315
- Search List 316
- Host Mapping 317
- Negative Cache 318
- No Response 318
- Security 319
- Defining Users 320
- Configuring TACACS+ 323
- Configuring a TACACS+ Server 325
- Configuring RADIUS 328
- Radius Workflow 329
- Active Access Profile 334
- STEP 6 Enter the parameters 335
- Defining Profile Rules 336
- SSL Server 338
- Configuring TCP/UDP Services 341
- Defining Storm Control 342
- Configuring Port Security 343
- Configuring 802.1X 346
- Dynamic VLAN Assignment (DVA) 347
- 802.1X Parameters Workflow 349
- Defining 802.1X Properties 349
- Defining Time Ranges 356
- Denial of Service Prevention 357
- Defense Against DoS Attacks 358
- Configuring DoS Prevention 359
- SYN Protection 361
- Martian Addresses 362
- SYN Filtering 363
- SYN Rate Protection 364
- ICMP Filtering 365
- IP Fragmented Filtering 365
- IP Source Guard 366
- Filtering 367
- Enabling IP Source Guard 368
- Binding Database 369
- Dynamic ARP Inspection 370
- ARP Defaults 372
- ARP Inspection Work Flow 373
- Introduction 377
- SSD Rules 378
- Elements of an SSD Rule 379
- NOTE Note the following: 381
- Default SSD Rules 382
- SSD Properties 383
- Passphrase 384
- Local Passphrase 384
- Configuration Files 386
- SSD Control Block 387
- Startup Configuration File 387
- Running Configuration File 388
- SSD Management Channels 391
- Configuring SSD 392
- Security: SSH Client 397
- Protection Methods 398
- Public/Private Keys 399
- Import Keys 399
- SSH Server Authentication 400
- SSH Client Authentication 401
- Before You Begin 402
- Common Tasks 402
- SSH User Authentication 404
- Security: SSH Server 407
- Access Control 413
- Defining IPv6-Based ACL 414
- Defining MAC-based ACLs 415
- Shutdown 416
- IPv4-based ACLs 418
- STEP 3 Click Add 419
- DSCP to Match 421
- IPv6-Based ACLs 422
- Defining an IPv6-based ACL 423
- STEP 5 Click Apply 425
- Defining ACL Binding 426
- Quality of Service 429
- QoS Features and Components 430
- QoS Workflow 431
- Configuring QoS - General 432
- Setting QoS Properties 433
- Configuring QoS Queues 434
- Strict Priority 435
- WRR Weight 435
- % of WRR Bandwidth 435
- Mapping DSCP to Queue 437
- Configuring Bandwidth 440
- QoS Basic Mode 444
- Configuring Global Settings 445
- QoS Advanced Mode 446
- Defining Class Mapping 451
- QoS Policers 452
- Defining Aggregate Policers 453
- Configuring a Policy 454
- Policy Class Maps 455
- Managing QoS Statistics 457
- Policer Statistics 458
- Viewing Queues Statistics 459
- STEP 4 Click Add 460
- STEP 5 Enter the parameters 460
- SNMP Versions and Workflow 463
- SNMPv1 and v2 464
- SNMP Workflow 464
- If you decide to use SNMPv3: 465
- Model OIDs 466
- SNMP Engine ID 467
- Configuring SNMP Views 469
- Creating SNMP Groups 470
- To create an SNMP group: 471
- Managing SNMP Users 472
- STEP 1 Click SNMP > Users 473
- Defining SNMP Communities 474
- Defining Trap Settings 476
- Notification Recipients 477
- SNMP Notification Filters 480
Powiązane produkty i podręczniki dla Oprogramowanie Cisco Systems SF300-24P
(30 strony)© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.027 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji