Specifications

Enterasys Matrix N Standalone (NSA) Series Configuration Guide 24-1

Security Configuration

ThischapterdescribestheSecurityConfigurationsetofcommandsandhowtousethem.

Overview of Security Methods

Thefollowingsecuritymethodsareavailableforcontrollingwhichusersareallowedtoaccess,

monitor,andmanagethedevice.

•Localusercredentials—usedforlocalauthenticationandauthorizationofCLIandWebView

managementsessions.Fordetails,referto“SettingUserAccountsandPasswords”on

page 2‐15and“Setting

theAuthenticationLoginMethod”onpage 25‐50.

•SNMPuserorcommunitynames—usedforauthenticationandauthorizationofallSNMP

requests.Fordetails,refertoChapter 5.

•MACLocking—locksaporttooneormoreMACaddresses,preventingconnectionof

unauthorizeddevicesviatheport.Fordetails,referto

“ConfiguringMACLocking”on

page 24‐2.

•SecureShell(SSH)—providesforsecureremoteCLImanagementaccess.Fordetails,referto

“ConfiguringSecureShell(SSH)”onpage 24‐11.

•IPAccessLists(ACLs)—permitsordeniesaccesstoroutinginterfacesbasedonprotocoland

inboundand/oroutboundIPaddress

restrictionsconfiguredinaccesslists.Fordetails,referto

“ConfiguringAccessLists”onpage 24‐15.

•Policy‐BasedRouting—permitsordeniesaccesstoroutinginterfacesbasedonaccesslistsin

aroutemapappliedtotheinterface.Fordetails,referto“ConfiguringDenialofService(DoS)

Prevention”on

page 24‐22.

•DenialofService(DoS)Prevention—preventsDenialofServiceattacks,includingland,

fragmentedandlargeICMPpackets,spoofedaddressattacks,andUDP/TCPportscanning.

Fordetails,referto“ConfiguringDenialofService(DoS)Prevention”onpage 24‐22.

For information about... Refer to page...

Overview of Security Methods 24-1

Configuring MAC Locking 24-2

Configuring Secure Shell (SSH) 24-11

Configuring Access Lists 24-15

Configuring Denial of Service (DoS) Prevention 24-22

Configuring Flow Setup Throttling (FST) 24-25