NETWORK RESILIENCY SOLUTIONS VCStack + Link aggregation

The Radius server is used for authenticating management sessions and also for authenticating 802.1x clients

Management access is ONLY possible via the core- connected aggregated link. Access via insecure methods Telnet and HTTP are blocked

Remote management sessions must use SSH and/or

HTTPS

All log messages are sent to a syslog server. Higher-severity log messages are also buffered on the switch itself

Allow read-only SNMP monitoring from one management station. Send traps to that same management station

System time is provided from an SNTP server

The console port can auto-detect the terminal data rate

radius-server host 192.168.10.34 auth-port 1812 acct-port 1813 key testing123-2

aaaauthentication login default radius local aaa authentication dot1x default radius

management access-list mlist deny service telnet

deny service http permit port-channel 1

exit

management access-class mlist

ip ssh server ip https server

logging 192.168.10.11 logging buffered errors

snmp-server community public ro 192.168.10.13 view Default snmp-server host 192.168.10.13 public traps 2

sntp client enable vlan 170 clock source sntp

sntp unicast client enable sntp server 192.168.10.3

line console autobaud exit

Allied Telesis

Allied Telesis x900 manual NETWORK RESILIENCY SOLUTIONS VCStack + Link aggregation