User manual

– 161 –
ES-2000 Series
14 SECURITY MEASURES
You can configure this switch to authenticate users logging into the system
for management access using local or remote authentication methods.
Port-based authentication using IEEE 802.1X can also be configured to
control either management access to the uplink ports or client access to
the data ports. This switch provides secure network management access
using the following options:
◆ AAA – Use local or remote authentication to specify authentication
servers.
◆ User Accounts – Manually configure access rights on the switch for
specified users.
◆ Network Access - Configure secure MAC address aging and dynamic
VLAN assignment.
◆ HTTPS – Provide a secure web connection.
◆ ACL – Access Control Lists provide packet filtering for IP frames (based
on address, protocol, Layer 4 protocol port number or TCP control
code).
◆ IP Filter – Filters management access to the web or SNMP interface.
◆ Port Security – Configure secure addresses for individual ports.
◆ Port Authentication – Use IEEE 802.1X port authentication to control
access to specific ports.
N OTE : The priority of execution for the filtering commands is Port Security,
Port Authentication, Network Access, and then Access Control Lists.