Administrator Guide

Table Of Contents
68 Switch Feature Overview
RADIUS Support
The switch has a Remote Authentication Dial In User Service (RADIUS)
client and can support up to 32 named authentication and accounting
RADIUS servers. The switch also supports RADIUS Attribute 4, which is the
configuration of a NAS-IP address. The switch can also be configured to
accept RADIUS-assigned VLANs.
For information about configuring RADIUS client settings, see
"Authentication, Authorization, and Accounting " on page 229.
SSH/SSL
The switch supports Secure Shell (SSH) for secure, remote connections to
the CLI and Secure Sockets Layer (SSL) to increase security when accessing
the web-based management interface. The SSH server can be enabled or
disabled using the ip ssh command.
For information about configuring SSH and SSL settings, see
"Authentication, Authorization, and Accounting " on page 229.
Inbound Telnet Control
By default, the switch allows access over Telnet. The administrator can enable
or disable the Telnet server using the ip telnet command. Additionally, the
Telnet port number is configurable using the same command.
For information about configuring inbound Telnet settings, see
"Authentication, Authorization, and Accounting " on page 229.
Denial of Service
The switch supports configurable Denial of Service (DoS) attack protection
for eight different types of attacks.
For information about configuring DoS settings, see "Port and System
Security " on page 623.