2–Planning
Internet Protocol Support
2-18 59265-02 B
Internet Protocol Support
The switch supports IP version 4 (IPV4), IP version 6 (IPV6), and DNS host
names. IPV4 and IPV6 are enabled by default. Consider your IP version
requirements and the availability of a DNS server.
Security
Security is available at the following levels:
User Account Security
IP Security
Port Binding
Connection Security
Device Security

User Account Security

User account security consists of the administration of account names,
passwords, expiration dates, and authority levels. If an account has Admin
authority, all management tasks can be performed by that account in the CLI,
QuickTools, and Enterprise Fabric Suite. Otherwise, only monitoring tasks are
available. The Admin account name is the only account that can create or add
account names, and change passwords of other accounts. All users can change
their own passwords. Account names and passwords are always required when
connecting to a switch.
Authentication of the user account and password can be performed locally using
the switch’s user account database or it can be performed remotely using a
RADIUS server such as Microsoft® RADIUS. Authenticating user logins on a
RADIUS server requires a secure management connection to the switch. For
information about securing the management connection, refer to “Connection
Security” on page 2-20. A RADIUS server can also authenticate devices and other
switches as described in “Device Security” on page 2-20.
Consider your management needs, and determine the number of user accounts,
their authority needs, and expiration dates. Also consider the advantages of
centralizing user administration and authentication on a RADIUS server.
NOTE:
If the same user account exists on a switch and its RADIUS server, that user
can log in with either password, but the authority and account expiration
always come from the switch database.