MNS-BB
Software User Guide
-24-
6.0 Security
Features
6.1
Manager and Operator passwords:
You can gain access and privileges for the command line through either the console port or through
the network by using Telnet . The features described in this chapter enhance security controls against
unauthorized access through the network.
6.2
Console access interface and the CLI.
There are two levels of console access:
Manager
and
Operator
. For security, you can set a password
on each of these levels.
6.2.1 Manager
This level allows access to all console interface areas.
Please change the default Manager Password to limit access of unauthorized people to the
configuration area of the console interface.
6.2.2 Operator
This level allows access to the Status, Event Log, and CLI levels but does not allow Configuration
capabilities.
On the Operator level, the Configuration Context, Download Application, and Reboot Switch option
are not accessible.
6.3
To use password security:
1. Set a Manager password (and an Operator password, if applicable for your system).
2. Exit from the current console session. A Manager password will now be needed for full access to
the console. Assuming that both a Manager password and an Operator password have been set, the
level of access to the console interface will be determined by which password is entered in response
to the prompt. The manager and operator passwords control access to the CLI.
Note
: Passwords are case-sensitive.
6.4
CLI: Setting Manager and Operator Passwords
6.4.1
Configuring Manager and Operator Passwords
This procedure prompts you to enter a password twice to help verify that you have correctly entered
the desired characters.
Syntax:
set password
LE2425A#
set password
Enter old password:********
Enter new password:*********
Confirm password :*********
Password changed successfully
Note:
Password must be 4-10 characters
(For more details, please refer
chapter
3)
6.5 Access
Levels
For each authorized user, the Manager and Operator have specific access levels (For Details, Please
see
Chapter 2
).
6.6
Configuring and Monitoring Port Security
The port security feature can be used to block input to an Ethernet, Fast Ethernet, or Gigabit Ethernet
port when the MAC (Media Control Address) of the station attempting to access the port is different
from any of the MAC addresses specified for that port. In the event of security violation, the port can
be configured to go into the disable mode or drop mode. The drop mode allows the user to configure
the port to remain enabled during a security violation and drop only packets that are coming in from
insecure hosts.
Network security hinges on the ability to allow or deny access to network resources. The access
