Enterasys Networks 1G58x-09 - Manual (Page 684)

Process Overview: Security Configuration
14-2 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide
• Port Web Authentication (PWA) – locks down a port a user is attached to until after the user logs
in using a web browser to access the switch. The switch will pass all login information from the
end station to a RADIUS server for authentication before turning the port on. PWA is an
alternative to 802.1X and MAC authentication. For details, refer to
Section 14.3.5 .
• Secure Shell (SSH) – permits or denies remote access based on IP address, ciphers and MAC
algorithms. For details, refer to
Section 14.3.6 .
• Access Lists (ACLs) – permits or denies access to routing interfaces based on protocol and
source IP address restrictions configured in access lists. For details, refer to
Section 14.3.7 .
• Denial of Service (DoS) Prevention - prevents Denial of Service attacks, including land,
fragmented and large ICMP packets, spoofed address attacks, and UDP/TCP port scanning. For
details, refer to
Section 14.3.8 .
• Flow Setup Throttling (FST) - prevents the effects of DoS attacks by limiting the number of new
or established flows that can be programmed on any individual switch port. For details, refer to
Section 14.3.9 .
14.2 PROCESS OVERVIEW: SECURITY CONFIGURATION
Use the following steps as a guide to configuring security methods on the device:
1. Configuring RADIUS ( Section 14.3.1 )
2. Configuring EAPOL ( Section 14.3.2 )
3. Configuring MAC Authentication ( Section 14.3.3 )
4. Configuring MAC Locking ( Section 14.3.4 )
5. Configuring Port Web Authentication ( Section 14.3.5 )
6. Configuring Secure Shell (SSH) ( Section 14.3.6 )
7. Configuring Access Lists (ACLs) ( Section 14.3.7 )
8. Configuring Denial of Service (DoS) Prevention ( Section 14.3.8 )
9. Configuring Flow Setup Throttling (FST) ( Section 14.3.9 )