Service Manual

Security

This chapter contains various types of security commands offered in the Dell Networking Operating System (OS).

The commands are listed in the following sections:

• AAA Accounting Commands

• Authorization and Privilege Commands

• Authentication and Password Commands

• RADIUS Commands

• TACACS+ Commands

• SSH Server and SCP Commands

• Secure DHCP Commands

For configuration details, refer to the Security chapter in the Dell Networking OS Configuration Guide.

NOTE: Starting with the Dell Networking OS version 7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.

Topics:

• AAA Accounting Commands

• Authorization and Privilege Commands

• Authentication and Password Commands

• RADIUS Commands

• TACACS+ Commands

• SSH Server and SCP Commands

• Secure DHCP Commands

• ICMP Vulnerabilities

AAA Accounting Commands

AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by those

services. When you enable AAA Accounting, the network server reports user activity to the TACACS+ security server in the form of

accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control server.

As with authentication and authorization, you must configure AAA Accounting by defining a named list of accounting methods, and then

applying that list to various interfaces.

aaa accounting

Enable AAA Accounting and create a record for monitoring the accounting function.

Syntax

aaa accounting {system | exec | commands level role role-name} {name | default}

{start-stop | wait-start | stop-only} {tacacs+}

Security 1069