Users Guide

Conguration Task List for Privilege Levels..........................................................................................................845
RADIUS........................................................................................................................................................................... 849
RADIUS Authentication...........................................................................................................................................849
Conguration Task List for RADIUS...................................................................................................................... 850
Support for Change of Authorization and Disconnect Messages packets...................................................... 854
TACACS+........................................................................................................................................................................865
Conguration Task List for TACACS+...................................................................................................................865
TACACS+ Remote Authentication.........................................................................................................................867
Command Authorization.........................................................................................................................................868
Protection from TCP Tiny and Overlapping Fragment Attacks...............................................................................868
Enabling SCP and SSH................................................................................................................................................. 868
Using SCP with SSH to Copy a Software Image................................................................................................ 869
Removing the RSA Host Keys and Zeroizing Storage ........................................................................................870
Conguring When to Re-generate an SSH Key ..................................................................................................870
Conguring the SSH Server Key Exchange Algorithm........................................................................................ 871
Conguring the HMAC Algorithm for the SSH Server........................................................................................871
Conguring the HMAC Algorithm for the SSH Client.........................................................................................872
Conguring the SSH Server Cipher List............................................................................................................... 872
Conguring the SSH Client Cipher List.................................................................................................................873
Conguring DNS in the SSH Server......................................................................................................................873
Secure Shell Authentication....................................................................................................................................874
Troubleshooting SSH............................................................................................................................................... 876
Telnet............................................................................................................................................................................... 877
VTY Line and Access-Class Conguration..................................................................................................................877
VTY Line Local Authentication and Authorization................................................................................................877
VTY Line Remote Authentication and Authorization...........................................................................................878
VTY MAC-SA Filter Support...................................................................................................................................878
Role-Based Access Control.......................................................................................................................................... 879
Overview of RBAC...................................................................................................................................................879
User Roles................................................................................................................................................................. 881
AAA Authentication and Authorization for Roles................................................................................................ 885
Role Accounting....................................................................................................................................................... 887
Display Information About User Roles...................................................................................................................888
Two Factor Authentication (2FA)................................................................................................................................ 889
Handling Access-Challenge Message...................................................................................................................890
Conguring Challenge Response Authentication for SSHv2.............................................................................890
SMS-OTP Mechanism............................................................................................................................................890
Conguring the System to Drop Certain ICMP Reply Messages.............................................................................891
Dell EMC Networking OS Security Hardening...........................................................................................................892
Dell EMC Networking OS Image Verication.......................................................................................................892
Startup Conguration Verication.........................................................................................................................894
Conguring the root User Password.....................................................................................................................895
Locking Access to GRUB Interface.......................................................................................................................895
Enabling User Lockout for Failed Login Attempts............................................................................................... 896
51 Service Provider Bridging......................................................................................................................... 897
Contents
27