Quick Reference Guide

864 PowerConnect B-Series TI24X Configuration Guide
53-1002269-02
Restricting remote access to management functions
26
• SNMP
The commands for granting access to each of these management interfaces is described in the
following.
SSHv2
To allow SSHv2 access to the device, you must generate a Crypto Key as shown in the following
command.
PowerConnect(config)# crypto key generate
Syntax: crypto key [generate | zeroize]
The generate parameter generates a dsa key pair.
The zeroize parameter deletes the currently operative dsa key pair.
In addition, you must use AAA authentication to create a password to allow SSHv2 access. For
example the following command configures AAA authentication to use TACACS+ for authentication
as the default or local if TACACS+ is not available.
PowerConnect(config)# aaa authentication login default tacacs+ local
SNMP
To allow SNMP access to the device, enter the following command.
PowerConnect(config)# snmp-server
Syntax: [no] snmp-server
Disabling specific access methods
You can specifically disable the following access methods:
• Telnet access
• SNMP access
• TFTP
NOTE
If you disable Telnet access, you will not be able to access the CLI except through a serial connection
to the management module. If you disable SNMP access, you will not be able to use Brocade
Network Advisor or third-party SNMP management applications.
Disabling Telnet access
You can use a Telnet client to access the CLI on the device over the network. If you do not plan to
use the CLI over the network and want to disable Telnet access to prevent others from establishing
CLI sessions with the device, enter the following command.
PowerConnect(config)# no telnet server
To re-enable Telnet operation, enter the following command.
PowerConnect(config)# telnet server
Syntax: [no] telnet server