Qlogic SANbox 3810, Руководство по установке

Страница: 41 / 92

Planning
Security
59268-00 A 2-7
A
IP Security
IP Security provides encryption-based security for IP version 4 and IP version 6
communications through the use of security policies and associations. Policies
can define security for host-to-host, host-to-gateway, and gateway-to-gateway
connections; one policy for each direction. For example, to secure the connection
between two hosts, you need two policies: one for outbound traffic from the
source to the destination, and another for inbound traffic to the source from the
destination.
A security association defines the encryption algorithm and encryption key to
apply when called by a security policy. A security policy may call several
associations at different times, but each association is related to only one policy.
Consider your IP security requirements.
Port Binding
Port binding provides authorization for a list of up to 32 device WWNs that are
permitted to log in to a particular switch port. Devices that are not among the 32
are refused access to the port. Consider what ports to secure and the set of
devices that are permitted to log in to those ports. For information about port
binding, refer to the
SANbox 3810 Fibre Channel Switch Command Line Interface
Guide .
Connection Security
Connection security provides an encrypted data path for switch management
methods. The switch supports the Secure Shell (SSH) protocol for the command
line interface and the Secure Socket Layer (SSL) protocol for management
applications such as SMI-S.
NOTE:
If the same user account exists on a switch and its RADIUS server, that user
can login with either password, but the authority and account expiration will
always come from the switch database.