Motorola BSR 2000, Руководство по настройке и управлению

Страница: 94 / 650

BSR 2000 Configuration and Management Guide Release 1.0
3-44 MGBI 526360-001-00 Rev. B
where:
local-password allows password authentication by a locally configured
password if there is no response from the RADIUS server. If the RADIUS
client is not configured with the
local-password command argument, access
to the BSR is denied when there is no response from the RADIUS server.
Non-Blank RADIUS Username and Password
RADIUS does not allow a user to enter blank usernames or passwords.
■
If a user does not enter a username, the BSR will not allow the user to enter a
password as the "password" prompt will never appear.
■
If a user does not enter a password, the blank password field is "padded" with
some random data so that the password field is never left blank. This will prevent
all RADIUS accounts that use a blank password from gaining authentication.
Viewing RADIUS Client Statistics
Use the show ip traffic command in Privileged EXEC mode to display packet
statistics for communication between the RADIUS client and RADIUS server:
MOT#
show ip traffic
Configuring Secure Shell Server Security
Secure Shell server (SSH) is a program that allows remote hosts to login to the BSR
over a non-secure
network and execute commands in a secure manner. SSH
provides strong authentication and secure communications over non-secure
networks such as the public Internet.
The SSH protocol uses TCP as the transport layer. An SSH server listens for
connections from SSH clients on a well-known TCP port. An SSH client is
launched from a remote host and connects to the SSH server. The SSH server and
SSH client then handle key exchange, encryption, authentication, command
execution, and data exchange.
Use the following sections to configure and view SSH parameters:
■
Enabling SSH
■
Managing SSH Parameters
■
Viewing and Logging out SSH Sessions
■
Enabling RADIUS services for SSH Password Authentication
■
Configuring Secure Shell Server Security