Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 241 / 496

Management Access Security
ExtremeWare XOS 11.1 Concepts Guide
241
To configure the alert threshold, use the following command:
configure dos-protect type l3-protect alert-threshold <packets>
To configure the notification threshold, use the following command:
configure dos-protect type l3-protect notify-threshold <packets>
To configure the ACL expiration time, use the following command:
configure dos-protect acl-expire <seconds>
Configuring Trusted Ports
Traffic from trusted ports will be ignored when DoS protect counts the packets to the CPU. If machines
on a port could never cause an attack of the switch, but could generate heavy traffic to the switch CPU,
trusted ports is a way to ensure the ports are not counted when checking for attacks.
To configure the trusted ports list, use the following command:
configure dos-protect trusted-ports [ports [<ports> | all] | add-ports [<ports-to-add>
| all] | delete-ports [<ports-to-delete> | all] ]
Display DoS Protection Settings
To display the DoS protection settings, use the following command:
show dos-protect {detail}
Management Access Security
Management access security features control access to the management functions available on the
switch. These features help insure that any configuration changes to the switch can be done only by
authorized users. In this category are the following features:
●
Authenticating Users Using RADIUS or on page 241
●
Secure Shell 2 on page 249
Authenticating Users Using RADIUS or
ExtremeWare XOS provides three methods to authenticate users who login to the switch:
●
RADIUS
●
●
Local database of accounts and passwords