HP Switch 6120 Instrukcja Użytkownika Strona 53
- Strona / 469
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
2-10
Configuring Username and Password Security
Saving Security Credentials in a Config File
Saving Security Credentials in a Config
File
You can store and view the following security settings in internal flash memory
by entering the include-credentials command:
■ Local manager and operator passwords and (optional) user names that
control access to a management session on the switch through the CLI,
menu interface, or web browser interface
■ SNMP security credentials used by network management stations to
access a switch, including authentication and privacy passwords
■ Port-access passwords and usernames used as 802.1X authentication
credentials for access to the switch
■ TACACS+ encryption keys used to encrypt packets and secure
authentication sessions with TACACS+ servers
■ RADIUS shared secret (encryption) keys used to encrypt packets and
secure authentication sessions with RADIUS servers
■ Secure Shell (SSH) public keys used to authenticate SSH clients that try
to connect to the switch.
Benefits of Saving Security Credentials
The benefits of including and saving security credentials are as follows:
■ After making changes to security parameters in the running configuration,
you can experiment with the new configuration and, if necessary, view
the new security settings during the session. After verifying the
configuration, you can then save it permanently by writing the settings to
the startup-config file.
■ By permanently saving a switch’s security credentials in internal flash
memory, you can upload the file to a TFTP server, and later download the
file to the ProCurve switches on which you want to use the same security
settings without having to manually configure the settings (except for
SNMPv3 user parameters) on each switch.
■ By storing different security settings in different files, you can test
different security configurations when you first download a new software
version that supports multiple configuration files, by changing the
configuration file used when you reboot the switch.
For more information about how to experiment with, upload, download, and
use configuration files with different software versions, refer to the following:
- Access Security Guide 1
- Hewlett-Packard Company 2
- 3 Web and MAC Authentication 6
- 4 TACACS+ Authentication 7
- 10 Configuring Port-Based and 12
- Product Documentation 18
- Software Feature Index 19
- Intelligent Edge Software 20
- Features 20
- Security Overview 23
- Introduction 24
- Access Security Features 25
- Network Security Features 29
- Physical Security 31
- SNMP Security Guidelines 37
- Dynamic Configuration Arbiter 39
- Network Immunity Manager 40
- (IDM) 43
- Menu: Setting Passwords 49
- Security tab 52
- [Device Passwords] 52
- [Apply Changes] 52
- Credentials 54
- Password Command Options 55
- SNMP Security Credentials 56
- Restrictions 64
- Front-Panel Security 66
- Front-Panel Button Functions 67
- Clear Button 68
- Reset Button 68
- ResetClear 69
- Password Recovery 75
- [Y] (for “Yes”) 76
- [N] (for “No”) 76
- Password Recovery Process 77
- MAC Authentication 81
- RADIUS-Based Authentication 83
- Wireless Clients 83
- Web-based Authentication 84
- MAC-based Authentication 86
- Operating Rules and Notes 89
- Setup Procedure for Web/MAC 91
- Web and MAC Authentication 100
- ProCurve Switch (config)# 103
- Files (Optional) 111
- Customizing HTML Templates 112
- Customizable HTML Templates 113
- Overview 127
- Client Status 137
- TACACS+ Authentication 138
- Terminology Used in TACACS 140
- Applications: 140
- General System Requirements 142
- Note on 144
- Privilege Levels 144
- Before You Begin 145
- Configuration 146
- Server Contact Configuration 147
- Authentication Parameters 149
- Caution Regarding 153
- Login Primary 153
- Encryption Keys 156
- First-Choice TACACS+ Server 158
- write mem) 160
- How Authentication Operates 161
- Local Authentication Process 163
- Using the Encryption Key 164
- Access When Using TACACS+ 165
- Authentication 165
- Messages Related to TACACS+ 166
- Operation 166
- Operating Notes 166
- Accounting 168
- Contents 169
- Accounting Services 171
- Configuration MIB 171
- Terminology 172
- You Want RADIUS To Protect 177
- (hpSwitchAuth) is disabled 190
- Commands Authorization 193
- Enabling Authorization 194
- Additional RADIUS Attributes 203
- Configuring RADIUS Accounting 204
- Interim Updating Options 211
- Viewing RADIUS Statistics 213
- RADIUS Accounting Statistics 216
- as both the primary 220
- Prerequisite for Using SSH 225
- Public Key Formats 225
- Enable (Manager) Password 230
- Host Public 232
- Key for the 232
- Configuring Key Lengths 233
- Client Contact Behavior 235
- ■ Execute no ip ssh 237
- Note on Port 239
- Public-Key Authentication 244
- Bit Size Exponent <e> 246
- Modulus <n> 246
- Note on Public 247
- Key Index Number 249
- Logging Messages 251
- Debug Logging 252
- Prerequisite for Using SSL 257
- Password Button 260
- Security Tab 260
- Generate New Key 263
- Enter certificate Arguments 263
- Generate New Certificate 263
- Show host certificate command 264
- [SSL] button 266
- Web browser interface 267
- Browser Contact Behavior 269
- Common Errors in SSL setup 273
- DHCP Snooping 277
- Enabling DHCP Snooping 278
- The DHCP Binding Database 285
- Enabling Debug Logging 286
- Operational Notes 286
- Log Messages 287
- Dynamic ARP Protection 289
- Configuring Trusted Ports 291
- Dynamic IP Lockdown 296
- Prerequisite: DHCP Snooping 297
- Enabling Dynamic IP Lockdown 299
- Database 301
- Adding a Static Binding 302
- Bindings 303
- Debugging Dynamic IP Lockdown 304
- Examples 309
- Filter Types and Operation 313
- Source-Port Filters 314
- Named Source-Port Filters 316
- [ index ] 318
- * ), indicating that the 327
- Editing a Source-Port Filter 328
- Filter Indexing 329
- Configuring Port-Based and 331
- User Authentication Methods 334
- as defined in the 337
- 802.1X standard 337
- VLAN Membership Priority 340
- Access Control 344
- Authenticators 348
- Based Authentication 350
- Wake-on-LAN Traffic 357
- 802.1X Open VLAN Mode 359
- VLAN Membership Priorities 360
- Unauthorized-Client VLANs 366
- Configure Port-Security 375
- Port-Security 376
- Other Switches 377
- Supplicant Port Configuration 379
- Statistics, and Counters 381
- ■ The switch reboots 394
- Affects VLAN Operation 395
- VLAN Assignment on a Port 396
- Based Authentication Session 398
- After the 802.1X session 401
- < port-number >: 403
- Port Security 407
- Eavesdrop Protection 408
- Blocking Unauthorized Traffic 408
- Trunk Group Exclusion 409
- Planning Port Security 410
- Port Security Display Options 411
- Configuring Port Security 415
- listing 418
- use this command syntax: 418
- Retention of Static Addresses 420
- MAC Lockdown 425
- MAC Lockdown Operating Notes 428
- MAC Lockout 429
- # VLANs # Lockout MACs 431
- < = 1024 16 431
- 1025-2048 8 431
- Port Security and MAC Lockout 432
- Security Features 433
- Alert Flags 433
- Send-Disable 435
- Resetting Alert Flags 436
- Yes” for the port on which 437
- Using Authorized IP Managers 443
- Access Levels 445
- Stations 446
- Managers 447
- Building IP Masks 452
- IP Entry 453
- Numerics 457
- 2 – Index 458
- Index – 3 459
- 4 – Index 460
- Index – 5 461
- 6 – Index 462
- Index – 7 463
- 8 – Index 464
- Index – 9 465
- 10 – Index 466
- Index – 11 467
- 12 – Index 468
- *5992-5525* 469
Powiązane produkty i podręczniki dla Oprogramowanie HP Switch 6120
Oprogramowanie HP BMD00022 Instrukcja Użytkownika
(228 strony)
(228 strony)
Oprogramowanie HP SN6000 Podręcznik Użytkownika
(122 strony)
(122 strony)
Oprogramowanie HP 3PAR Instrukcja Użytkownika
(89 strony)
(89 strony)
Oprogramowanie HP 700wl Instrukcja Użytkownika
(388 strony)
(388 strony)
Oprogramowanie HP X9300 Przewodnik Instalacji
(151 strony)
(151 strony)
Oprogramowanie HP SP1 Instrukcja Użytkownika
(143 strony)
(143 strony)
Oprogramowanie HP 2000s Podręcznik Użytkownika
(200 strony)
(200 strony)
Oprogramowanie HP 2012i Instrukcja Użytkownika
(86 strony)
(86 strony)
Oprogramowanie HP XP12000 Instrukcja Użytkownika
(38 strony)
(38 strony)
Oprogramowanie HP 1TB Instrukcja Użytkownika
(80 strony)
(80 strony)
Oprogramowanie HP M401dne Instrukcja Użytkownika
(160 strony)
(160 strony)
Oprogramowanie HP 441877-00B Instrukcja Użytkownika
(176 strony)
(176 strony)
Hoshizaki DCM-500BWH-OS manuels
Manuels d'utilisation et guides de l'utilisateur pour Congélateurs Hoshizaki DCM-500BWH-OS.
Nous fournissons des manuels en pdf 1 Hoshizaki DCM-500BWH-OS à télécharger gratuitement par type de document : Manuel de l'utilisateur
Komentarze do niniejszej Instrukcji