Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 279

Management Interface Security This section describes the minimum set of management interface security measures implemented by the CLI. Management interface security consists of user account management, user access control and remote network/host access controls. CLI through Telnet, SSH, Serial Interfaces The CLI is accessible through a local serial interface/console port, the out-ofband interface, or in-band interfaces. Since the console port requires a physical connection for access, it is used if all else fails. The console port interface is the only interface from which the user may access the Easy Setup Wizard. It is the only interface that the user can access if the remote authentication servers are down and the user has not configured the system to revert to local managed accounts. The following rules and specifications apply to these interfaces: • The CLI is accessible from remote telnet through the IP address for the switch. IP addresses are assigned separately for the out-of-band interface and the in-band ports. • The CLI is accessible from a secure shell interface. • The administrator generates keys for SSH locally via the CLI. • The serial session defaults to 9600 BAUD, eight data bits, one stop bit, no parity and no flow control (115200 for the N1108EP-ON, N2200-ON, and N3200-ON). User Accounts Management The CLI provides configuration of authentication for switch administrators or network users either through remote authentication servers supporting TACACS+ or RADIUS or through a set of locally managed user accounts. The setup wizard asks the user to create the initial administrator account and password at the time the system is booted. The following rules and specifications apply: • The administrator may create additional administrator accounts. • User accounts have an associated privilege level, a user name, and a user password. • The administrator is able to delete the administrator accounts. Using the CLI 279