72
Table of Contents
Linksys
72
Chapter 12 Security
Security
This section describes device security and access control The system handles
various types of security
This chapter covers the following sections:
•
Management Security
•
RADIUS
•
Network Access Control
•
Port Security
•
Storm Control
Management Security
The default username/password is admin/admin
You can assign authentication methods to the various management access
methods, such as, Telnet, HTTP, and HTTPS The authentication can be
performed locally or on a RADIUS server
User Access & Accounts
The User Access & Accounts page enables entering additional users that are
permitted to access to the device (read-only or read-write) or changing the
passwords of existing users
User authentication occurs in the order that the authentication methods are
selected If the first authentication method is not available, the next selected
method is used For example, if the selected authentication methods are
RADIUS and Local, and all configured RADIUS servers are queried in priority
order and do not reply, the user is authenticated locally
If an authentication method fails or the user has insufficient privilege level, the
user is denied access to the device In other words, if authentication fails at an
authentication method, the device stops the authentication attempt; it does
not continue and does not attempt to use the next authentication method
After adding a user (as described below), the default user is removed from
the system
NOTE:
It is not permitted to delete all users If all users are selected, the Delete
button is disabled
To add a new user:
STEP 1 Click Configuration > Security > Management Security > User Access
& Accounts
This page displays the users defined in the system Enter the following fields:
•
HTTP Service—Select to enable on the device
•
HTTP Server Port—Enter the port on which HTTP is enabled
•
HTTPS Service—Select to enable on the device
•
HTTPS Server Port—Enter the port on which HTTPS is enabled
•
Telnet—Select to enable on the device
STEP 2
Click Add to add a new user or click Edit to modify a user
STEP 3
Enter the parameters
•
User Name—Enter a new username between 0 and 20 characters UTF-8
characters are not permitted
•
Password—Enter a password (UTF-8 characters are not permitted)
•
Confirm Password—Enter the password again
STEP 4
Click Apply The user is added to the Running Configuration file of
the device
Access Authentication
You can assign authentication methods to the various management access
methods, such as console, HTTP, and HTTPS The authentication can be
performed locally or on a RADIUS server
User authentication occurs in the order that the authentication methods are
selected If the first authentication method is not available, the next selected
method is used For example, if the selected authentication methods are
RADIUS and Local, and all configured RADIUS servers are queried in priority
order and do not reply, the user is authenticated locally
