Lenovo Flex System Fabric CN4093, Application Manual

Page: 587 / 634

© Copyright Lenovo 2017 Chapter 39: Secure Input/Output Module
587
 TFTP client (for signed items only, such as switch images)
Secure Protocols
The following protocols are deemed “secure” and are enabled by default in Secure
Mode:
 SCP Server
 SNMPv3 Client
 SFTP Client
 SSHv2 Server
 SSHv2 Client
 HTTPS Server
 Client
You can disable these protocols.
The following protocols are deemed “secure” and cannot be disabled in any mode:
 NTP Client v4
 LDAPS Client
The following protocols are also deemed “secure” on the CN4093 and can be
enabled.
 IKE
 IPSec
The default state for these protocols in Secure Mode, whether enabled or disabled,
is the same as in Legacy Mode.
The following protocols are deemed “secure” but are not currently supported by
the CN4093:
 EAPoL
 SCP
 S/MIME
 SNMPv3 Manager
 TCP command secure mode (Port 6091)
Insecure Protocols Unaffected by SIOM
The following protocols are deemed “insecure” but can be enabled in all Security
Policy Modes:
 Ping
 Ping IPv6
 Traceroute
 Traceroute IPv6
 TFTP IPv6