Manuals
/
Brands
/
Computer Equipment
/
Switch
/
Cisco Systems
/
Computer Equipment
/
Switch
Cisco Systems
OL-5650-02 manual
1
1
122
122
Download
122 pages, 1.15 Mb
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408
526-4000
800 553-NETS (6387)
Fax: 408
5
26-4100
Cisco Content Services Switch
Security Configuration Guide
Software Version 7
.50
March 2005
Text Part Number: OL-5650-02
Contents
Main
Cisco Content Services Switch Security Configuration Guide
Software Version 7.50 March 2005
Page
CONTENTS
Page
Page
Page
Page
Page
Page
Page
Preface
Audience
How to Use This Guide
Related Documentation
Page
Page
Symbols and Conventions
Obtaining Documentation
Cisco.com
Documentation DVD
Ordering Documentation
Documentation Feedback
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support Website
Submitting a Service Request
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Page
Page
Controlling CSS Access
Changing the Administrative Username and Password
Creating Usernames and Passwords
Page
Page
Controlling Remote User Access to the CSS
Configuring Virtual Authentication
Configuring Console Authentication
Page
Controlling Administrative Access to the CSS
Enabling Administrative Access to the CSS
Disabling Administrative Access to the CSS
Controlling CSS Network Traffic Through Access Control Lists
ACL Overview
Page
ACL Configuration Quick Start
Page
Creating an ACL
Deleting an ACL
Configuring Clauses
Page
Page
Page
Page
Page
Adding a Clause When ACLs are Globally Enabled
Deleting a Clause
Applying an ACL to a Circuit or DNS Queries
Removing an ACL from Circuits or DNS Queries
Enabling ACLs on the CSS
Disabling ACLs on the CSS
Showing ACLs
Page
Setting the Show ACL Counters to Zero
Logging ACL Activity
Page
ACL Example
Configuring Network Qualifier Lists for ACLs
Creating an NQL
Describing an NQL
Adding Networks to an NQL
Page
Adding an NQL to an ACL Clause
Showing NQL Configurations
Configuring the Secure Shell Daemon Protocol
Enabling SSH
Configuring SSH Access
Configuring SSHD in the CSS
Configuring SSHD Keepalive
Configuring SSHD Port
Configuring SSHD Server-Keybits
Configuring SSHD Version
Configuring Telnet Access When Using SSHD
Showing SSHD Configurations
Page
Page
Configuring the CSS as a Client of a RADIUS Server
Page
RADIUS Configuration Quick Start
Configuring a RADIUS Server for Use with the CSS
Configuring Authentication Settings
Configuring Authorization Settings
Specifying a Primary RADIUS Server
Specifying a Secondary RADIUS Server
Configuring the RADIUS Server Timeouts
Configuring the RADIUS Server Retransmits
Configuring the RADIUS Server Dead-Time
Showing RADIUS Server Configuration Information
Page
Page
Page
Configuring the CSS as a Client of a TACACS+ Server
TACACS+ Configuration Quick Start
Configuring TACACS+ Server User Accounts for Use with the CSS
Configuring Authentication Settings
Configuring Authorization Settings
Configuring Global TACACS+ Attributes
Setting the Global CSS TACACS+ Timeout Period
Defining a Global Encryption Key
Setting the Global TACACS+ Keepalive Frequency
Defining a TACACS+ Server
Page
Page
Setting TACACS+ Authorization
Sending Full CSS Commands to the TACACS+ Server
Setting TACACS+ Accounting
Showing TACACS+ Server Configuration Information
Page
Page
Configuring Firewall Load Balancing
Overview of FWLB
Firewall Synchronization
Configuring FWLB
Configuring a Keepalive Timeout for a Firewall
Configuring an IP Static Route for a Firewall
Configuring OSPF to Advertise Firewall Routes
number from 1 to 16,777,215
Configuring RIP to Advertise Firewall Routes
Example of FWLB Static Route Configuration
Page
5-9
Cisco Content Services Switch Security Configuration Guide OL-5650-02
Chapter5 Configuring Firewall Load Balancing Configuring FWLB
Figure 5-1 illustrates the configuration defined in the firewall commands.
Figure 5-1 Example of FWLB
Configuring FWLB with VIP and Virtual Interface Redundancy
Page
Page
5-13
Example of Firewall and Route Configurations
CSS-OUT-L Configuration
CSS-OUT-R Configuration
5-14
CSS-IN-L Configuration
CSS-IN-R Configuration
Displaying Firewall Flow Summaries
Displaying Firewall IP Routes
Displaying Firewall IP Information
Page
INDEX
A
C
D
E
F
I
K
L
N
R
S
T
U
V
W
