User Reference Manual.book

Contents
Chapter 22: Access Control List Configuration Guide..................................371
ACL Basics ............................................................................................................................ 372
Defining Selection Criteria in ACL Rules ...................................................................... 372
How ACL Rules are Evaluated....................................................................................... 373
Implicit Deny Rule.......................................................................................................... 374
Allowing External Responses to Established TCP Connections .................................... 375
Creating ACLs........................................................................................................................ 376
In-line Editing .......................................................................................................... 377
Wildcards ................................................................................................................. 377
Applying ACLs ...................................................................................................................... 377
Applying ACLs to Interfaces .......................................................................................... 378
Applying ACLs to Services ............................................................................................ 379
Applying ACLs to Layer-4 Bridging Ports..................................................................... 379
Using ACLs as Profiles................................................................................................... 379
Using Profile ACLs with the IP Policy Facility ...................................................... 380
Using Profile ACLs with the Traffic Rate Limiting Facility................................... 381
Using Profile ACLs with Dynamic NAT ................................................................ 382
Using Profile ACLs with the Port Mirroring Facility.............................................. 382
Using Profile ACLs with the Web Caching Facility ............................................... 383
Modifying ACLs .................................................................................................................... 384
Maintaining ACLs Using the ACL Editor ...................................................................... 384
Editing ACLs Offline...................................................................................................... 385
Enabling ACL Logging.......................................................................................................... 386
Monitoring ACLs ................................................................................................................... 387
Chapter 23: Security Configuration Guide .....................................................389
Security Overview.................................................................................................................. 389
Configuring X-Pedition Access Security ............................................................................... 390
RADIUS..........................................................................................................................390
Configuring RADIUS .............................................................................................. 390
Monitoring RADIUS ............................................................................................... 391
Configuring Passwords ............................................................................................ 391
TACACS Plus................................................................................................................. 392
Configuring TACACS Plus ..................................................................................... 392
Monitoring TACACS Plus....................................................................................... 393
Configuring Passwords ............................................................................................ 393
Password Policy Management ........................................................................................ 394
Single-User Mode .................................................................................................... 394
Multi-User Mode ..................................................................................................... 395
SNMP.............................................................................................................................. 396
SNMPv1, SNMPv2c, and SNMPv3 Agent Overview............................................. 396
Security .................................................................................................................... 396
Access Control......................................................................................................... 397
Reliability................................................................................................................. 398
Supported SNMPv3 MIBs ....................................................................................... 398
Configuration Overview ................................................................................................. 400
Creating Users.......................................................................................................... 400
Creating Communities ............................................................................................. 401
Creating Groups....................................................................................................... 403
xviii Enterasys X-Pedition User Reference Manual