Home » D-Link Manuals » Hubs & Switches » D-Link DWS-3250 » Manual Viewer

D-Link DWS-3250 Product Manual - Page 41

Security Management and Password Configuration, Configuring Security Passwords Introduction

UPC - 790069289996

Add to My Manuals
Save this manual to your list of manuals

Page 41 highlights

DXS/DWS 3200 Series User Guide The following example illustrates the process: Console> enable Console# delete startup-config Startup file was deleted Console# reload You haven't saved your changes. Are you sure you want to continue (y/n)[n]? This command will reset the whole system and disconnect your current session.Do you want to continue (y/n)[n the device reboots */ To verify the IP address, enter the show ip interface command. The device is now configured with an IP address. Security Management and Password Configuration System security is handled through the AAA (Authentication, Authorization, and Accounting) mechanism that manages user access rights, privileges, and management methods. AAA uses both local and remote user databases. Data encryption is handled through the SSH mechanism. The system is delivered with no default password configured; all passwords are user-defined. If a user-defined password is lost, a password recovery procedure can be invoked from the Startup menu. The procedure is applicable for the local terminal only and allows a one-time access to the device from the local terminal with no password entered. Configuring Security Passwords Introduction The security passwords can be configured for the following services: • Console • Telnet • SSH • HTTP • HTTPS Passwords are user-defined. When creating a user name, the default priority is "1," which allows access but not configuration rights. A priority of "15" must be set to enable access and configuration rights to the device. Although user names can be assigned privilege level 15 without a password, it is recommended to always assign a password. If there is no specified password, privileged users can access the Web interface with any password. Configuring an Initial Console Password To configure an initial console password, enter the following commands: Console(config)# aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line console Console(config-line)# login authentication default Console(config-line)# enable authentication default Console(config-line)# password george When initially logging on to a device through a console session, enter george at the password prompt. When changing a device's mode to enable, enter george at the password prompt. Page 40

Section	Page
Preface	8
Section 1. Device Description	10
Viewing the Device	10
DXS-3250/DWS Front Panel	10
DXS/DWS-3227 Front Panel	11
DXS/DWS-3227P Front Panel	11
Back Panels	12
Ports Description	13
1000Base-T Gigabit Ethernet Ports	13
10G XFP Fiber port	13
Optional Modules	13
SFP Ports	14
RS-232 Console Port	15
Stacking Ports	15
Cable Specifications	17
LED Definitions	17
Port LEDs	17
SFP LEDs	19
System LEDs	19
Cable, Port, and Pinout Information	21
Pin Connections for the 10/100/1000 Ethernet Interface	21
Physical Dimensions	23
Section 2. Mounting Device	26
Preparing for Installation	26
Installation Precautions	26
Site Requirements	27
Unpacking	27
Installing the Device	28
Desktop or Shelf Installation	28
Rack Installation	28
Connecting the Device	31
Connecting the Switch to a Terminal	31
AC Power Connection	31
Section 3. Initial Configuration	32
General Configuration Information	32
Auto-Negotiation	32
Device Port Default Settings	33
Booting the Switch	33
Configuration Overview	35
Initial Configuration	36
Advanced Configuration	39
Retrieving an IP Address From a DHCP Server	39
Receiving an IP Address From a BOOTP Server	40
Security Management and Password Configuration	41
Software Download and Reboot	43
Software Download through XModem	43
Software Download Through TFTP Server	43
Boot Image Download	44
Configuring Stacking	45
Startup Menu Functions	47
Download Software	47
Erase FLASH File	48
Erase FLASH Sectors	48
Password Recovery	49
WLAN Licence Key	49
Section 4. Getting Started	52
Starting the D-Link Embedded Web Interface	53
Understanding the D-Link Embedded Web Interface	55
Device Representation	56
Using the D-Link Embedded Web Interface Management Buttons	57
Using Screen and Table Options	58
Adding Configuration Information	58
Modifying Configuration Information	58
Deleting Configuration Information	59
Resetting the Device	60
Logging Off from the Device	61
Section 5. Managing Device Information	62
Defining the System Description	62
Defining Advanced System Settings	64
Section 6. Managing Power over Ethernet Devices	66
Defining PoE System Information	67
Displaying and Editing PoE System Information	69
Section 7. Managing Stacking	72
Understanding the Stack Topology	73
Stacking Failover Topology	73
Stacking Members and Unit ID	73
Removing and Replacing Stacking Members	74
Exchanging Stacking Members	75
Switching the Stacking Master	75
Configuring Stacking	76
Section 8. Configuring Device Security	78
Configuring Management Security	79
Configuring Authentication Methods	79
Configuring Passwords	96
Configuring Network Security	100
Network Security Overview	100
Defining Network Authentication Properties	102
Defining Port Authentication	104
Configuring Traffic Control	109
Defining DOS Protection Security	114
Section 9. Configuring Ports	116
Viewing Port Properties	119
Section 10. Aggregating Ports	122
Configuring LACP	123
Defining LAG Members	125
Section 11. Configuring VLANs	126
Defining VLAN Properties	127
Defining VLAN Membership	129
Defining VLAN Interface Settings	131
Configuring GARP	133
Defining GARP	133
Defining GVRP	135
Configuring Multicast VLANs	137
Defining VLAN Groups	138
Section 12. Defining WLAN	142
Defining WLAN System Properties	143
Enabling WLAN	143
Defining WLAN Security	144
Viewing WLAN Rogues	148
Viewing WLAN Stations	150
Defining WLAN Access Points	151
Defining WLAN Access Point Properties	152
Adding a New Access point	153
Configuring WLAN VLANs	154
Configuring WLAN Template Settings	155
Configuring WLAN Radio Settings	157
Defining WLAN Radio Settings	157
Defining BSS Settings	159
Defining WLAN Power Settings	163
Viewing WLAN Statistics	165
Viewing Access Point Statistics	165
Viewing Radio Interfaces Statistics	167
Viewing BSS Statistics	169
Viewing WLAN Stations	170
Section 13. Configuring IP Information	172
Configuring IP Interfaces	172
Defining IP Addresses	173
Defining Default Gateways	175
Configuring DHCP	176
Configuring ARP	178
Configuring Domain Name Servers	180
Defining DNS Servers	180
Defining DNS Host Mapping	182
Section 14. Defining the Forwarding Database and Static Routes	184
Defining Static Forwarding Database Entries	185
Defining Dynamic Forwarding Database Entries	187
Configuring Routing	189
Section 15. Configuring Spanning Tree	192
Defining Classic Spanning Tree	193
Defining STP on Interfaces	195
Defining Rapid Spanning Tree	198
Defining Multiple Spanning Tree	199
Defining MSTP Instance Settings	201
Defining MSTP Interface Settings	203
Section 16. Configuring Multicast Forwarding	206
Defining IGMP Snooping	207
Defining Multicast Bridging Groups	209
Defining Multicast Forward All Settings	211
Configuring Multicast TV	213
Defining IGMP Snooping for Multicast TV	213
Viewing Multicast TV Members	215
Section 17. Configuring SNMP	216
SNMP v1 and v2c	216
SNMP v3	216
Configuring SNMP Security	216
Defining SNMP Security	217
Defining SNMP Views	218
Defining SNMP Group Profiles	220
Defining SNMP Group Members	223
Defining SNMP Communities	226
Configuring SNMP Notifications	228
Defining SNMP Notification Global Parameters	229
Defining SNMP Notification Filters	230
Defining SNMP Notification Recipients	232
Section 18. Configuring Quality of Service	238
Quality of Service Overview	239
VPT Classification Information	239
CoS Services	239
Defining General QoS Settings	239
Configuring QoS General Settings	239
Restoring Factory Default QoS Interface Settings	242
Configure Bandwidth Settings	242
Defining Queues	244
Configuring QoS Mapping	245
Mapping CoS Values to Queues	245
Mapping DSCP Values to Queues	246
Configuring Advanced QoS Settings	247
Defining Policy Properties	247
Defining Tail Dropping	249
Defining Policy Profiles	254
Section 19. Managing System Files	258
File Management Overview	258
Downloading System Files	259
Firmware Download	259
Configuration Download	260
Uploading System Files	261
Upload Type	261
Software Image Upload	262
Configuration Upload	262
Activating Image Files	263
Copying Files	264
Restoring the Default Configuration File	264
Managing System Files	265
Section 20. Managing System Logs	266
Enabling System Logs	267
Viewing the Device Memory Logs	269
Clearing Device Memory Logs	269
Viewing the FLASH Logs	270
Clearing FLASH Logs	270
Defining Servers Log Parameters	271
Section 21. Managing Device Diagnostics	274
Configuring Port Mirroring	275
Viewing Integrated Cable Tests	278
Viewing Optical Transceivers	280
Viewing the CPU Utilization	281
Section 22. Configuring System Time	282
Configuring Daylight Savings Time	282
Configuring SNTP	286
Polling for Unicast Time Information	286
Polling for Anycast Time Information	286
Broadcast Time Information	286
Defining SNTP Global Settings	287
Defining SNTP Authentication	289
Defining SNTP Servers	291
Defining SNTP Interface Settings	293
Section 23. Viewing Statistics	296
Viewing Interface Statistics	296
Viewing Device Interface Statistics	297
Resetting Interface Statistics Counters	298
Viewing Port Utilization Statistics	299
Viewing Etherlike Statistics	300
Resetting Etherlike Statistics Counters	301
Viewing GVRP Statistics	302
Resetting GVRP Statistics Counters	303
Viewing EAP Statistics	304
Managing RMON Statistics	306
Viewing RMON Statistics	307
Resetting RMON Statistics Counters	308
Configuring RMON History	309
Defining RMON Alarms	316
Appendix A, WLAN Country Settings	318
Appendix B, Device Specifications & Features	326
Hardware Specifications	326
DXS-3227, DXS-3227P, and DXS-3250 Features	327
Appendix B, Troubleshooting	334
Problem Management	335
Troubleshooting Solutions	335
Warranty	366

Match case Limit results 1 per page

DXS/DWS 3200 Series User Guide

Page 40

The following example illustrates the process:

To verify the IP address, enter the show ip interface command. The device is now configured with an IP address.

Security Management and Password Configuration

System security is handled through the AAA (Authentication, Authorization, and Accounting) mechanism that

manages user access rights, privileges, and management methods. AAA uses both local and remote user data-

bases. Data encryption is handled through the SSH mechanism.

The system is delivered with no default password configured; all passwords are user-defined. If a user-defined

password is lost, a password recovery procedure can be invoked from the Startup menu. The procedure is appli-

cable for the local terminal only and allows a one-time access to the device from the local terminal with no pass-

word entered.

Configuring Security Passwords Introduction

The security passwords can be configured for the following services:

•

Console

•

Telnet

•

SSH

•

HTTP

•

HTTPS

Passwords are user-defined.

When creating a user name, the default priority is "1," which allows access but not configuration rights. A priority of

"15" must be set to enable access and configuration rights to the device. Although user names can be assigned

privilege level 15 without a password, it is recommended to always assign a password. If there is no specified

password, privileged users can access the Web interface with any password.

Configuring an Initial Console Password

To configure an initial console password, enter the following commands:

When initially logging on to a device through a console session, enter george at the password prompt.

When changing a device’s mode to enable, enter george at the password prompt.

Console>

enable

Console#

delete startup-config

Startup file was deleted

Console#

reload

You haven’t saved your changes. Are you sure you want to continue (y/n)[n]?

This command will reset the whole system and disconnect your current

session.Do you want to continue (y/n)[n]?

******************************************************

/*the device reboots */

Console(config)#

aaa authentication login default line

Console(config)#

aaa authentication enable default line

Console(config)#

line console

Console(config-line)#

enable authentication default

Console(config-line)#

password

george