ZyXEL Communications XGS2220 Series, Руководство пользователя

Страница: 443 / 655

Chapter 66 Access Control
XGS2220 Series User’s Guide
443
C
HAPTER
66
Access Control
66.1 Access Control Overview
This chapter describes how to control access to the Switch.
A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up to five web
sessions (five different user names and passwords) and/or limitless SNMP access control sessions are
allowed.
A console port access control session and Telnet access control session cannot coexist when multi-login
is disabled. See the CLI Reference Guide for more information on disabling multi-login.
66.1.1 What You Can Do
• Use the Service Access Control screen ( Section 66.2 on page 443 ) to decide what services you may
use to access the Switch.
• Use the Remote Management screen ( Section 66.3 on page 444 ) to specify a group of one or more
“trusted computers” from which an administrator may use a service to manage the Switch.
• Use the Account Security screen ( Section 66.4 on page 445 ) to encrypt all passwords configured in
the Switch. You can also display the authentication, authorization, external authentication server
information (RADIUS or ), system and SNMP user account information in the configuration file
saved.
66.2 Service Access Control
Service Access Control allows you to decide what services you may use to access the Switch. You may
also change the default service port and configure “trusted computers” for each service in the
SECURITY > Access Control > Remote Management screen (discussed later). Click SECURITY > Access
Control > Service Access Control to display the following screen.
Table 253 Access Control Overview
Console Port SSH Telnet FTP Web SNMP
One session Share up to 9 sessions One session Up to 5 accounts No limit