Configuration Guide User guide

BigIron RX Series Configuration Guide 1457
53-1002484-04
Security/Management
E
SNMP access
SSH access
SSL
aaa authorization commands <privilege-level> default
radius | none
“Configuring command authorization” on page 100
aaa authorization exec default radius | none “Configuring Exec authorization” on page 100
enable aaa console “Command authorization and accounting for console
commands” on page 101
radius-server host
<ip-addr> | <server-name> [auth-port
<number> acct-port <number> [authentication-only |
authorization-only | accounting-only | default] [key
<string>]]
“Identifying the RADIUS server to the BigIron RX” on
page 96
“Specifying different servers for individual AAA
functions” on page 97
radius-server key [0 | 1]
<string> “Setting the RADIUS key” on page 97
radius-server retransmit
<number> “Setting the retransmission limit” on page 82
radius-server timeout
<number> “Setting the timeout parameter” on page 98
show aaa “Displaying RADIUS configuration information” on
page 103
Commands See ...
snmp-client <ip-addr> “Restricting SNMP access to a specific IP address”
on page 60
snmp-server community
<string>
ro | rw
<standard-acl-name> | <standard-acl-id>
“Using ACLs to restrict SNMP access” on page 58
snmp-server enable vlan
<vlan-id> “Restricting SNMP access to a specific VLAN” on
page 61
snmp-server enable [ethernet | traps |vlan] “Disabling SNMP access” on page 63
Commands See ...
ip ssh client <ip-addr> “Restricting SSH access to a specific IP address” on
page 59
ssh access-group
<num> | <name> “Using ACLs to restrict SNMP access” on page 58
Commands See ...
crypto-ssl certificate generate “Generating an SSL certificate” on page 75
crypto-ssl certificate zeroize “Deleting the SSL certificate” on page 75
ip ssl certificate-data-file tftp
<ip-addr>
<certificate-filename>
“Importing digital certificates and RSA private key
files” on page 74
Commands See ...