Netgear XCM8806 Chassis User Manual - Page 465

NETGEAR 8800 User Manual To display rate limiting statistics, use the following command: show ports {} rate-limit flood {no-refresh} Authenticating Management Sessions Through the Local Database You can use a local database on each switch to authenticate management sessions. The local database stores user names and passwords and helps to ensure that any configuration changes to the switch can be done only by authorized users. For a detailed description of the local database of accounts and passwords (the two levels of management accounts), see Chapter 2, Getting Started. You can increase authentication security using Secure Shell 2 (SSH2). SSH2 provides encryption for management sessions. For information about SSH2, see Secure Shell 2 on page 504. Note: You can also authenticate Web-based and MAC-based Network Login users through the local database. For more information, see Chapter 16, Network Login. Authenticating Management Sessions Through a TACACS+ Server You can use a Terminal Access Controller Access Control System Plus (TACACS+) server to authenticate management sessions for multiple switches. A TACACS+ server allows you to centralize the authentication database, so that you do not have to maintain a separate local database on each switch. TACACS+ servers provide the following services: • Username and password authentication • Command authorization (the TACACS+ server validates whether the user is authorized to execute each command within the subset of commands, based on login privilege level.) • Accounting service (tracks authentication and authorization events) Note: You can use a local database on each switch as a backup authentication service if the TACACS+ service is unavailable. When the TACACS+ service is operating, privileges defined on the TACACS+ server take precedence over privileges configured in the local database. Chapter 17. Security | 465