
36
MES3000 Ethernet switch series
------------------
------------------ --------------- ------
Traps are enabled.
Authentication-failure trap is enabled.
Version 1,2 notifications
Target Address Type Community Version Udp Filter To Retries
Port name Sec
---------------- -------- ----------- ---------- ----- ------- ----- ---------
Version 3 notifications
Target Address Type Username Security Udp Filter To Retries
Level Port name Sec
---------------- -------- ----------- -------- ----- ------- ----- ---------
System Contact:
System Location:
4.5.2
Security system configuration
To ensure the system security, the switch uses AAA mechanism (Authentication, Authorization,
Accounting).
SSH mechanism
is used for data encryption.
Authentication
—matching of the existing account in the security system.
Authorization (access level verification
)—matching of the existing account in the system
(passed authentication) and specific privileges.
Accounting
—user resource consumption monitoring.
For default device settings, username is
admin
, password is not assigned. Password should be
assigned by the user. If the password is lost, you can restart the device and interrupt its startup via the
serial port by pressing
<Esc>
or
<Enter>
keys in two seconds after the automatic startup message is
displayed. The
Startup
menu will be opened, there you can initiate the password recovery procedure ([3]
Password Recovery Procedure).
To ensure the basic security, you can define the password for the following services:
–
Console (serial port connection)
–
Telnet
–
SSH
4.5.2.1
Setting password for console
console(config)#
aaa authentication login default
line
console(config)#
aaa authentication enable default
line
console(config)#
line console
console(config-line)#
login authentication default
console(config-line)#
enable authentication default
console(config-line)#
password console
Enter the
console
password in reply to the password entry prompt that appears during the
registration in the console session.
4.5.2.2
Setting password for Telnet
console(config)#
aaa authentication login default line
console(config)#
aaa authentication enable default line
console(config)#
ip telnet server
console(config)#
line telnet
console(config-line)#
login authentication default