2–Planning
Internet Protocol Support
2-12 59229-05 A
Internet Protocol Support
The switch supports IP version 4, IP version 6, and Domain Name System (DNS)
host names. IP versions 4 and 6 are enabled by default. Consider your IP version
requirements and the availability of a DNS server.
Security
Security is available at the following levels:
User Account Security
Connection Security
Port Binding
Device Security

User Account Security

User account security consists of the administration of account names,
passwords, expiration date, and authority level. If an account has Admin authority,
all management tasks can be performed by that account in the CLI, QuickTools,
and Enterprise Fabric Suite 2007. Otherwise only monitoring tasks are available.
The default account name, Admin, is the only account that can create or add
account names and change passwords of other accounts. All users can change
their own passwords. The default Admin account password is password. This
password should be changed to ensure security. Account names and passwords
are always required when connecting to a switch.
Authentication of the user account and password can be performed locally using
the switch’s user account database or it can be done remotely using a RADIUS
server such as Microsoft® RADIUS. Authenticating user logins on a RADIUS
server requires a secure management connection to the switch. Refer to
“Connection Security” on page 2-13 for information about securing the
management connection. A RADIUS server can also be used to authenticate
devices and other switches as described in “Device Security” on page 2-14.
Consider your management needs and determine the number of user accounts,
their authority needs, and expiration dates. Also consider the advantages of
centralizing user administration and authentication on a RADIUS server.
NOTE:
If the same user account exists on a switch and its RADIUS server, that user
can login with either password, but the authority and account expiration will
always come from the switch database.