Netgear XCM8806 - 8800 SERIES 6-SLOT CHASSIS SWITCH 사용자 설명서

다운로드
페이지 968
436
   
|   
Chapter 17.  Security  
NETGEAR 8800 User Manual 
analysis, common response mechanisms include applying an ACL, changing Quality of 
Service (QoS) parameters, or modifying VLAN settings. 
For more information about sFlow, see the section 
Safe Defaults Mode
When you set up your switch for the first time, you must connect to the console port to access 
the switch. After logging in to the switch, you enter safe defaults mode. Although SNMP, 
Telnet, and switch ports are enabled by default, the script prompts you to confirm those 
settings. By answering 
N (No)
 to each question, you keep the default settings.
Would you like to disable Telnet? [y/N]: No
Would you like to disable SNMP [y/N]: No
Would you like unconfigured ports to be turned off by default [y/N]: No
Would you like to change the failsafe account username and password now? [y/N]: 
No
Would you like to permit failsafe account access via the management port? [y/N]: 
No
In addition, if you keep the default settings for SNMP and Telnet, the switch returns the 
following interactive script: 
Since you have chosen less secure management methods, please remember to 
increase the security of your network by taking the following actions: 
* change your admin password 
* change your failsafe account username and password
* change your SNMP public and private strings 
* consider using SNMPv3 to secure network management traffic 
For more detailed information about safe defaults mode, see 
MAC Security
The switch maintains a database of all media access control (MAC) addresses received on 
all of its ports. The switch uses the information in this database to decide whether a frame 
should be forwarded or filtered. MAC security (formerly known as MAC address security) 
allows you to control the way the Forwarding Database (FDB) is learned and populated. For 
more information about the FDB, see 
Note:  
MAC security is not supported on BlackDiamond 20800 series 
switches.
MAC security includes several types of control. You can: