Chapter 66 Access Control
XGS2220 Series User’s Guide
443
C
HAPTER
66
Access Control
66.1 Access Control Overview
This chapter describes how to control access to the Switch.
A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up to five web
sessions (five different user names and passwords) and/or limitless SNMP access control sessions are
allowed.
A console port access control session and Telnet access control session cannot coexist when multi-login
is disabled. See the CLI Reference Guide for more information on disabling multi-login.
66.1.1 What You Can Do
• Use the
Service Access Control
screen (
) to decide what services you may
use to access the Switch.
• Use the
Remote Management
) to specify a group of one or more
“trusted computers” from which an administrator may use a service to manage the Switch.
• Use the
Account Security
screen (
) to encrypt all passwords configured in
the Switch. You can also display the authentication, authorization, external authentication server
information (RADIUS or ), system and SNMP user account information in the configuration file
saved.
66.2 Service Access Control
Service Access Control allows you to decide what services you may use to access the Switch. You may
also change the default service port and configure “trusted computers” for each service in the
SECURITY
>
Access Control
>
Remote Management
screen (discussed later). Click
SECURITY
>
Access
Control
>
Service Access Control
to display the following
screen.
Table 253 Access Control Overview
Console Port
SSH
Telnet
FTP
Web
SNMP
One session
Share up to 9 sessions
One session
Up to 5 accounts
No limit
