Brocade Communications Systems 6650 manual Radius

enable aaa console, 55

enable port-config-password,14 enable super-user-password,14, 36 enable telnet password, 36

enable user disable-on-login-failure,20 global-filter-strict-security,172

ip access-group,86, 88, 91

ip access-group frag deny, 108 ip access-list extended, 97

ip access-list standard, 88

ip dhcp relay information policy keep, 292 ip dhcp snooping vlan, 286

ip directed-broadcast,268 ip icmp burst-normal,269 ip mtu, 159

ip preserve-ACL-user-input-format,101 ip ssh client, 6

ip ssh key-authentication yes no, 70

ip ssh password-authentication no yes, 70 ip ssh permit-empty-passwd no yes, 71 ip ssh pub-key-file tftp, 69

ip tcp burst-normal,270 ip use-ACL-on-arp,112 ipv6 access-list,132 ipv6 traffic-filter,138 kill console, 26 logging-enable,107

mac-authentication auth-fail-action,238 mac-authentication disable-aging,248 mac-authentication disable-ingress-filtering,241 mac-authentication dos-protection mac-limit,246 mac-authentication enable, 237 mac-authentication mac-filter,239 mac-authentication max-age,250 mac-authentication password-override,251 mac-session-aging no-aging permitted-mac-only,180 match ip address, 123

maxreq, 178 privilege level, 15

radius-server host, 47, 49, 164 radius-server host ipv6, 51 radius-server retransmit, 50 rate-limit output shaping, 276, 277 rate-limit output shaping ethernet, 277 re-authentication,175

route-map,122 secure-mac-address,205 servertimeout, 178

set interface null0, 123 set ip next hop, 123 show users, 23 snmp-client,7

ssh, 80 supptimeout, 178 tacacs-server key, 33 tacacs-server retransmit, 33 tacacs-server timeout, 33 telnet login-retries,9 telnet login-timeout,8, 9 telnet server enable vlan, 10 telnet timeout, 8 telnet-client,6

tftp client enable vlan, 10 timeout restrict-fwd-period,182 timeout tx-period,177 traffic-policy,144, 147 violation restrict, 206 violation shutdown, 207

command output show aaa, 41, 56 show access-list,104

show auth-mac-address,252 show dot1x, 184, 192 show dot1x config, 186, 193 show dot1x mac-session,194 show dot1x statistics, 187 show ip access-list,104

show ip dhcp relay information, 293 show ip ssh config, 73

show mac-address,226

show port security ethernet, 208 show port security mac, 208 show port security statistics, 209 show rate-limit fixed, 275 show table-mac-vlan,221, 225

show table-mac-vlan denied-mac,223 show traffic-policy,152

configuration

command authorization, 38 passwords, 17

RADIUS, 44

RADIUS authorization, 53 secure shell (SSH2), 65 TACACS and TACACS+, 30 username, 17

console idle time, defining, 5 CPU rate-limiting

and traffic policies, 277

D

defining Telnet idle time, 8

Brocade ICX 6650 Security Configuration Guide	305
53-1002601-01