Configuration Guide User guide

vi FastIron Configuration Guide
53-1002494-02
Remote access to management function restrictions . . . . . . . . . .112
ACL usage to restrict remote access . . . . . . . . . . . . . . . . . . . .112
Defining the console idle time . . . . . . . . . . . . . . . . . . . . . . . . .115
Remote access restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . .115
Restricting access to the device based on IP or
MAC address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
Defining the Telnet idle time . . . . . . . . . . . . . . . . . . . . . . . . . . .118
Changing the login timeout period for Telnet sessions . . . . . .118
Specifying the maximum number of login attempts
for Telnet access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
Changing the login timeout period for Telnet sessions . . . . . .118
Restricting remote access to the device to
specific VLAN IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
Designated VLAN for Telnet management sessions
to a Layer 2 Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120
Device management security . . . . . . . . . . . . . . . . . . . . . . . . . .121
Disabling specific access methods. . . . . . . . . . . . . . . . . . . . . .122
Passwords used to secure access . . . . . . . . . . . . . . . . . . . . . . . . . .124
Setting a Telnet password . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Setting passwords for management privilege levels. . . . . . . .125
Recovering from a lost password . . . . . . . . . . . . . . . . . . . . . . .127
Displaying the SNMP community string . . . . . . . . . . . . . . . . . .128
Specifying a minimum password length. . . . . . . . . . . . . . . . . .128
Local user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
Enhancements to username and password . . . . . . . . . . . . . .129
Local user account configuration . . . . . . . . . . . . . . . . . . . . . . .133
Creating a password option. . . . . . . . . . . . . . . . . . . . . . . . . . . .135
Changing a local user password . . . . . . . . . . . . . . . . . . . . . . . .136
SSL security for the Web Management Interface . . . . . . . . . . . . . .136
Enabling the SSL server on the Brocade device . . . . . . . . . . .137
Changing the SSL server certificate key size . . . . . . . . . . . . . .137
Support for SSL digital certificates larger than 2048 bits . . .138
Importing digital certificates and RSA private key files. . . . . .138
Generating an SSL certificate . . . . . . . . . . . . . . . . . . . . . . . . . .138