Enterasys Networks CSX7000, CSX5500, CSX6000 Configuring Device Level Security Using Cfgedit

CONFIGURING SECURITY LEVEL

Device Level Security

DEVICE LEVEL SECURITY

CONFIGURING DEVICE LEVEL SECURITY

USING CFGEDIT

1.Select Device Level Security from the Security Level Menu. If you need guidance to find this menu, refer to the instructions provided in the No Security configuration section.

2.Refer to the chapter Configuring Device Level Databases in order to select and configure the device level database.

USING MANAGE MODE

seclevel

Displays the current security level configuration data.

DEVICE LEVEL SECURITY BACKGROUND INFORMATION

Device level security is an authentication process between internetworking devices, in which authentication takes place automatically. Both bridges and routers support this form of security.Device level security is available to the network locally through the On-node Device Database or remotely through CSM or RADIUS Server.

Device level security is the default configuration. Through device level security, you have several options for validating remote devices and providing security for the network. The security options available are dependent on the remote device type and the line protocol in use.

The following tables summarize information needed for different device types:

Interface Type	Associated Remote		Security
	Device Type		Required?
WAN		IP Host	optional
		PPP
WAN (Direct Host)		IP Host	optional
		PPP
WAN (RLAN)	HDLC Bridge		REQUIRED
		PPP
WAN		PPP	REQUIRED
(UnNumbered)
Device Type		Security Options
PPP		CLID, CHAP, PAP
HDLC Bridge		CLID, MAC Address Security
IP Host		CLID, IP Host ID

Note: For further information regarding network interfaces and their corresponding configuration elements, refer to the network interface information refer to the network interface information in the Configuring Basic IP Routing Options chapter.

Central Site Remote Access Switch 167