Users Guide

Conguring RMON Collection Statistics...............................................................................................................703
Conguring the RMON Collection History........................................................................................................... 703
42 Rapid Spanning Tree Protocol (RSTP)..................................................................................................... 705
Protocol Overview......................................................................................................................................................... 705
Conguring Rapid Spanning Tree................................................................................................................................ 705
Related Conguration Tasks................................................................................................................................... 705
Important Points to Remember................................................................................................................................... 705
RSTP and VLT..........................................................................................................................................................706
Conguring Interfaces for Layer 2 Mode....................................................................................................................706
Enabling Rapid Spanning Tree Protocol Globally........................................................................................................706
Adding and Removing Interfaces.................................................................................................................................709
Modifying Global Parameters....................................................................................................................................... 709
Enabling SNMP Traps for Root Elections and Topology Changes..................................................................... 710
Modifying Interface Parameters................................................................................................................................... 710
Enabling SNMP Traps for Root Elections and Topology Changes............................................................................ 711
Inuencing RSTP Root Selection.................................................................................................................................. 711
Conguring an EdgePort................................................................................................................................................711
Conguring Fast Hellos for Link State Detection....................................................................................................... 712
43 Software-Dened Networking (SDN).......................................................................................................713
44 Security....................................................................................................................................................714
AAA Accounting..............................................................................................................................................................714
Conguration Task List for AAA Accounting.........................................................................................................714
AAA Authentication........................................................................................................................................................716
Conguration Task List for AAA Authentication................................................................................................... 717
Obscuring Passwords and Keys....................................................................................................................................719
AAA Authorization..........................................................................................................................................................719
Privilege Levels Overview........................................................................................................................................719
Conguration Task List for Privilege Levels..........................................................................................................720
RADIUS........................................................................................................................................................................... 724
RADIUS Authentication........................................................................................................................................... 724
Conguration Task List for RADIUS.......................................................................................................................725
TACACS+........................................................................................................................................................................728
Conguration Task List for TACACS+................................................................................................................... 728
TACACS+ Remote Authentication.........................................................................................................................729
Command Authorization......................................................................................................................................... 730
Protection from TCP Tiny and Overlapping Fragment Attacks................................................................................ 731
Enabling SCP and SSH.................................................................................................................................................. 731
Using SCP with SSH to Copy a Software Image.................................................................................................732
Removing the RSA Host Keys and Zeroizing Storage ........................................................................................733
Conguring When to Re-generate an SSH Key ..................................................................................................733
Conguring the SSH Server Key Exchange Algorithm....................................................................................... 733
Conguring the HMAC Algorithm for the SSH Server....................................................................................... 734
Conguring the HMAC Algorithm for the SSH Client.........................................................................................734
Conguring the SSH Server Cipher List............................................................................................................... 735
Contents
23