TP-Link TL-SL3452 - Manual (Page 28)


Section 5. Configuring Device Security
This section describes pages that contain fields for setting security parameters for ports, device management methods,
users, and server security for the TP-Link device.
This section contains the following topics:
Configuring Management Security
Configuring Network Security
5.1 Configuring Management Security
This section provides information for configuring device management security.
This section includes the following topics:
Configuring Authentication Methods
Configuring Passwords
5.1.1 Configuring Authentication Methods
This section provides information for configuring device authentication methods.
This section includes the following topics:
Defining Access Profiles
Defining Profile Rules
Defining Authentication Profiles
Mapping Authentication Profiles
Defining TACACS+ Host Settings
Defining RADIUS Server Settings
5.1.1.1 Defining Access Profiles
Access profiles are profiles and rules for accessing the device. Access to management functions can be limited to user
groups. User groups are defined for interfaces according to IP addresses or IP subnets. Access profiles contain management
methods for accessing and managing the device. The device management methods include:
All
Telnet
Secure Telnet (SSH)
HTTP
Management access to different management methods may differ between user groups. For example, User Group 1 can
access the switch module only via an HTTPS session, while User Group 2 can access the switch module via both HTTPS
and Telnet sessions. The Access Profile Page contains the currently configured access profiles and their activity status.
Assigning an access profile to an interface denies access via other interfaces. If an access profile is assigned to any interface,
the device can be accessed by all interfaces.
To configure access profiles:
1. Click
System > Management Security > Authentication > Access Profiles. The Access Profile Page opens:













