Intended Audience
This document is intended for:
- Data configuration engineers
- Commissioning engineers
- Network monitoring engineers
- System maintenance engineers
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol |
Description |
|---|---|
|
Indicates an imminently hazardous situation which, if not avoided, will result in death or serious injury. |
|
Indicates a potentially hazardous situation which, if not avoided, could result in death or serious injury. |
|
Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury. |
|
Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results. NOTICE is used to address practices not related to personal injury. |
|
Calls attention to important information, best practices and tips. NOTE is used to address information not related to personal injury, equipment damage, and environment deterioration. |
Security Conventions
- Password setting
- To ensure device security, use ciphertext when configuring a password and change the password periodically.
- The switch considers all passwords starting and ending with %^%#, %#%#, %@%@ or @%@% as ciphertext and decrypts them. If you configure a plaintext password that starts and ends with %^%#, %#%#, %@%@ or @%@%, the switch decrypts it and records it into the configuration file (plaintext passwords are not recorded for the sake of security). Therefore, do not set a password starting and ending with %^%#, %#%#, %@%@ or @%@%.
- When you configure passwords in ciphertext, different features must use different ciphertext passwords. For example, the ciphertext password set for the AAA feature cannot be used for other features.
- Encryption algorithms
The switch currently supports the 3DES, AES, RSA, SHA1, SHA2, and MD5 encryption algorithms. 3DES, RSA, and AES are reversible, whereas SHA1, SHA2, and MD5 are irreversible. Using the encryption algorithms DES , 3DES, RSA (RSA-1024 or lower), MD5 (in digital signature scenarios and password encryption), or SHA1 (in digital signature scenarios) is a security risk. If protocols allow, use more secure encryption algorithms, such as AES, RSA (RSA-2048 or higher), SHA2, or HMAC-SHA2.
An irreversible encryption algorithm must be used for the administrator password. SHA2 is recommended for this purpose.
- Personal data
Some personal data may be obtained or used during operation and fault location of your purchased products, services, or features. Set up privacy policies and take appropriate measures to protect personal data based on regional privacy laws.
- Mirroring
The terms mirrored port, port mirroring, traffic mirroring, and mirroring in this document are mentioned only to describe the product's function of communication error or failure detection, and do not involve collection or processing of any personal information or communication data of users.
Disclaimer
This document is designed as a reference for you to configure your devices. Its contents, including web pages, command line input and output, are based on laboratory conditions. It provides instructions for general scenarios, but does not cover all use cases of all product models. The examples given may differ from your use case due to differences in software versions, models, and configuration files. When configuring your device, alter the configuration depending on your use case.
The specifications provided in this document are tested in lab environment (for example, the tested device has been installed with a certain type of boards or only one protocol is run on the device). Results may differ from the listed specifications when you attempt to obtain the maximum values with multiple functions enabled on the device.
Feature Constraints
This document provides instructions on how to configure various features through the web-based network management system (NMS). Features displayed on the web-based NMS prevail. That is, if a device supports a feature but the feature is not displayed on the web-based NMS, you cannot manage this feature through the web-based NMS.
If configurations are performed through the web-based NMS and on the device, the web-based NMS may not display the device operation result. Click the navigation tree and refresh the page so that data can be correctly displayed.
Change History
Changes between document issues are cumulative. Therefore, the latest document version contains all updates made to previous versions.
Changes in Issue 01 (2016-08-12) V200R010C00
Initial commercial release.