Users Guide

Table Of Contents
Simple password check.................................................................................................................................................932
Obscure passwords....................................................................................................................................................... 932
Role-based access control............................................................................................................................................933
Assign user role.............................................................................................................................................................. 933
Bootloader protection................................................................................................................................................... 934
Linuxadmin user conguration..................................................................................................................................... 934
RADIUS authentication.................................................................................................................................................935
RADIUS over TLS authentication................................................................................................................................ 936
TACACS+ authentication..............................................................................................................................................937
Unknown user role.........................................................................................................................................................938
SSH server..................................................................................................................................................................... 938
Virtual terminal line ACLs..............................................................................................................................................939
Restrict SNMP access..................................................................................................................................................940
Enable AAA accounting................................................................................................................................................ 940
Enable user lockout........................................................................................................................................................941
Limit concurrent login sessions.....................................................................................................................................941
Enable login statistics....................................................................................................................................................942
Privilege levels ...............................................................................................................................................................942
Congure privilege levels........................................................................................................................................ 943
Congure enable password.................................................................................................................................... 944
Audit log..........................................................................................................................................................................944
Security commands.......................................................................................................................................................945
aaa accounting.........................................................................................................................................................946
aaa authentication login..........................................................................................................................................946
aaa re-authenticate enable..................................................................................................................................... 947
boot protect disable username...............................................................................................................................947
boot protect enable username password............................................................................................................. 948
clear logging audit....................................................................................................................................................948
crypto ssh-key generate......................................................................................................................................... 948
disable....................................................................................................................................................................... 949
enable........................................................................................................................................................................949
enable password priv-lvl......................................................................................................................................... 950
ip access-class.........................................................................................................................................................950
ip radius source-interface........................................................................................................................................ 951
ip tacacs source-interface.......................................................................................................................................951
ipv6 access-class.....................................................................................................................................................952
ip ssh server challenge-response-authentication................................................................................................952
ip ssh server cipher................................................................................................................................................. 952
ip ssh server enable.................................................................................................................................................953
ip ssh server hostbased-authentication................................................................................................................954
ip ssh server kex...................................................................................................................................................... 954
ip ssh server mac.....................................................................................................................................................955
ip ssh server password-authentication.................................................................................................................956
ip ssh server port.....................................................................................................................................................956
ip ssh server pubkey-authentication..................................................................................................................... 956
Contents
17