46

AT-8700XL Series Switch User Guide

In normal mode, a user with manager privilege can create and delete accounts for users with any of these privilege levels. Users and passwords are managed by the User Authentication Facility. Users and passwords are authenticated using an internal database called the User Authentication Database, or by interrogation of external RADIUS (Remote Authentication Dial In User Service) or TACACS (Terminal Access Controller Access System) servers.

On the CLI, to use an account with manager privilege, log in to the account by entering the command:

LOGIN

The switch prompts you to enter a user name and password. To return to USER mode, enter the command:

LOGOFF

Make sure that you do not leave a manager session unattended. Unauthorised use of a manager session gives access to the User Authentication Database. To reduce the risk of unauthorised activity, a subset of manager commands have a security timer. These commands are shown in Table 4 on page 46. When you enter one of these commands from a manager session, the security timer is started and is then restarted each time you enter another of these commands. If you enter one of these commands after the timer has expired, you are prompted to re-enter the password. The secure delay timer is by default 60 seconds. If the password is not entered correctly the password prompt is repeated a set number of times. If the correct password is still not entered a log message is generated and the session is logged off.

The security timer enables a manager to make successive additions and modifications to the database at one time without having to re-enter the password for every command.

The security timer does not provide a foolproof security mechanism. Managers should always attempt to log out of a manager session before leaving a terminal unattended.

Table 4: Secure commands controlled by the security timer.

Command

Description

 

 

ADD TACACS SERVER

Adds a TACACS server to the list of TACACS servers used

 

for user authentication.

 

 

ADD USER

Adds a user to the User Authentication Database.

 

 

DELETE TACACS SERVER

Deletes a TACACS server from the list of TACACS servers

 

used for user authentication.

 

 

DELETE USER

Deletes a user from the User Authentication Database.

 

 

PURGE USER

Deletes all users except MANAGER from the User

 

Authentication Database.

 

 

SET MANAGER PORT

Assigns a port semipermanent MANAGER privilege.

 

 

SET USER

Modifies a user record in the User Authentication Database.

 

 

If the switch is operating in security mode, the manager must also log in to a user account with SECURITY OFFICER privilege in order to execute any of the commands listed in Table 4 on page 46.

Software Release 2.6.1 C613-02030-00 REV B

Page 45 Page 47
Page 46
Image 46
Allied Telesis at-8700xl series switch manual Login
Page 45 Page 47

at-8700xl series switch specifications

Allied Telesis AT-8700XL Series Switches are sophisticated networking devices designed to meet the demanding requirements of modern enterprise environments. These managed Ethernet switches are optimized for reliability, performance, and scalability, making them ideal for various applications, from small businesses to large-scale networks.

One of the standout features of the AT-8700XL series is its robust Layer 2 and Layer 3 capabilities. This versatility allows the switches to perform both basic switching and advanced routing functions, facilitating efficient data traffic management. The series supports a wide range of standard protocols, including VLANs, STP, and RSTP, ensuring smooth and flexible network segmentation.

Another critical characteristic is the series' high-speed connectivity options. With multiple Gigabit Ethernet ports, the AT-8700XL series can handle significant data loads, ensuring seamless communication between connected devices. Furthermore, some models within the series offer 10 Gigabit uplink ports, providing the necessary bandwidth to connect to core networks or high-speed servers.

The AT-8700XL series incorporates advanced Quality of Service (QoS) features that enable network administrators to prioritize traffic effectively. This is particularly crucial for applications sensitive to latency, such as VoIP and video conferencing. By ensuring that time-sensitive data packets are transmitted promptly, the switches help maintain optimal performance across the entire network.

Power over Ethernet (PoE) support is yet another advantage of the AT-8700XL series. This feature allows the switches to deliver power to connected devices, such as IP cameras and wireless access points, via the Ethernet cable. This capability simplifies installations by reducing the need for additional power sources, ultimately saving on costs and improving efficiency.

Security is paramount in any network, and the AT-8700XL series does not disappoint. The switches employ robust security protocols, including Access Control Lists (ACLs), MAC address filtering, and DHCP snooping, to protect against unauthorized access and ensure network integrity.

In summary, Allied Telesis AT-8700XL Series Switches offer a comprehensive solution for various networking needs. With their Layer 2 and Layer 3 capabilities, high-speed connectivity, QoS features, PoE support, and security measures, these switches are well-equipped to enhance network efficiency and reliability, making them an excellent choice for organizations looking to future-proof their infrastructure. The AT-8700XL series exemplifies Allied Telesis's commitment to delivering high-quality networking solutions that cater to the evolving demands of businesses today.
Top Page Image Contents