22.10.2013 Views

7.8.1.0 - Force10 Networks

7.8.1.0 - Force10 Networks

7.8.1.0 - Force10 Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

To specify a password for the terminal line, use the following commands, in any order, in the LINE mode:<br />

Command Syntax Command Mode Purpose<br />

privilege level level LINE Configure a custom privilege level for the terminal<br />

lines.<br />

• level level range: 0 to 15. Levels 0, 1 and 15<br />

are pre-configured. Levels 2 to 14 are<br />

available for custom configuration.<br />

password [encryption-type] password LINE Specify either a plain text or encrypted password.<br />

Configure the following optional and required<br />

parameters:<br />

• encryption-type: Enter 0 for plain text or 7 for<br />

encrypted text.<br />

• password: Enter a text string up to 25<br />

characters long.<br />

To view the password configured for a terminal, use the show config command in the LINE mode.<br />

Enable and disabling privilege levels<br />

Enter the enable or enable privilege-level command in the EXEC privilege mode to set a user’s security<br />

level. If you do not enter a privilege level, FTOS sets it to 15 by default.<br />

To move to a lower privilege level, enter the command disable followed by the level-number you wish to<br />

set for the user in the EXEC privilege mode. If you enter disable without a level-number, your security<br />

level is 1.<br />

RADIUS<br />

Remote Authentication Dial-In User Service (RADIUS) is a distributed client/server protocol. This<br />

protocol transmits authentication, authorization, and configuration information between a central RADIUS<br />

server and a RADIUS client (the <strong>Force10</strong> system). The system sends user information to the RADIUS<br />

server and requests authentication of the user and password. The RADIUS server returns one of the<br />

following responses:<br />

• Access-Accept—the RADIUS server authenticates the user<br />

• Access-Reject—the RADIUS server does not authenticate the user<br />

If an error occurs in the transmission or reception of RADIUS packets, the error can be viewed by enabling<br />

the debug radius command.<br />

Transactions between the RADIUS server and the client are encrypted (the users’ passwords are not sent in<br />

plain text). RADIUS uses UDP as the transport protocol between the RADIUS server host and the client.<br />

For more information on RADIUS, refer to RFC 2865, Remote Authentication Dial-in User Service.<br />

686 Security

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!