Concept Guide

Modifying Interface Parameters...................................................................................................................................799
Enabling SNMP Traps for Root Elections and Topology Changes...........................................................................799
Inuencing RSTP Root Selection.................................................................................................................................799
Conguring an EdgePort.............................................................................................................................................. 800
Conguring Fast Hellos for Link State Detection....................................................................................................... 801
44 Software-Dened Networking (SDN)...................................................................................................... 802
45 Security...................................................................................................................................................803
AAA Accounting.............................................................................................................................................................803
Conguration Task List for AAA Accounting........................................................................................................803
AAA Authentication.......................................................................................................................................................805
Conguration Task List for AAA Authentication.................................................................................................. 806
Obscuring Passwords and Keys...................................................................................................................................809
AAA Authorization.........................................................................................................................................................809
Privilege Levels Overview.......................................................................................................................................809
Conguration Task List for Privilege Levels...........................................................................................................810
RADIUS............................................................................................................................................................................814
RADIUS Authentication........................................................................................................................................... 814
Conguration Task List for RADIUS....................................................................................................................... 815
Support for Change of Authorization and Disconnect Messages packets.......................................................819
TACACS+........................................................................................................................................................................830
Conguration Task List for TACACS+...................................................................................................................830
TACACS+ Remote Authentication.........................................................................................................................832
Command Authorization.........................................................................................................................................833
Protection from TCP Tiny and Overlapping Fragment Attacks............................................................................... 833
Enabling SCP and SSH................................................................................................................................................. 833
Using SCP with SSH to Copy a Software Image................................................................................................ 834
Removing the RSA Host Keys and Zeroizing Storage ....................................................................................... 835
Conguring When to Re-generate an SSH Key ..................................................................................................835
Conguring the SSH Server Key Exchange Algorithm....................................................................................... 836
Conguring the HMAC Algorithm for the SSH Server.......................................................................................836
Conguring the HMAC Algorithm for the SSH Client.........................................................................................837
Conguring the SSH Server Cipher List............................................................................................................... 837
Conguring the SSH Client Cipher List................................................................................................................ 838
Conguring DNS in the SSH Server......................................................................................................................838
Secure Shell Authentication................................................................................................................................... 839
Troubleshooting SSH................................................................................................................................................841
Telnet...............................................................................................................................................................................842
VTY Line and Access-Class Conguration................................................................................................................. 842
VTY Line Local Authentication and Authorization............................................................................................... 842
VTY Line Remote Authentication and Authorization...........................................................................................843
VTY MAC-SA Filter Support.................................................................................................................................. 843
Role-Based Access Control..........................................................................................................................................844
Overview of RBAC.................................................................................................................................................. 844
User Roles.................................................................................................................................................................846
Contents
25