AAA Authorization..........................................................................................................................................................190
Privilege Levels Overview........................................................................................................................................190
Conguration Task List for Privilege Levels........................................................................................................... 191
RADIUS............................................................................................................................................................................194
RADIUS Authentication........................................................................................................................................... 195
Conguration Task List for RADIUS....................................................................................................................... 196
TACACS+........................................................................................................................................................................ 199
Conguration Task List for TACACS+....................................................................................................................199
TACACS+ Remote Authentication........................................................................................................................ 200
Enabling SCP and SSH.................................................................................................................................................. 201
Using SCP with SSH to Copy a Software Image................................................................................................ 202
Secure Shell Authentication................................................................................................................................... 203
Troubleshooting SSH...............................................................................................................................................206
Telnet...............................................................................................................................................................................206
VTY Line and Access-Class Conguration................................................................................................................. 206
VTY Line Local Authentication and Authorization...............................................................................................206
VTY Line Remote Authentication and Authorization...........................................................................................207
VTY MAC-SA Filter Support...................................................................................................................................207
Dell EMC Networking OS Security Hardening...........................................................................................................208
Dell EMC Networking OS Image Verication.......................................................................................................208
Startup Conguration Verication.........................................................................................................................209
Conguring the root User Password......................................................................................................................210
Enabling User Lockout for Failed Login Attempts................................................................................................. 211
18 Simple Network Management Protocol (SNMP).......................................................................................212
Supported Modes...........................................................................................................................................................212
Implementation Information.......................................................................................................................................... 213
Conguring the Simple Network Management Protocol.......................................................................................... 213
Important Points to Remember.............................................................................................................................. 213
Setting up SNMP..................................................................................................................................................... 213
Creating a Community............................................................................................................................................. 213
Setting Up User-Based Security (SNMPv3).............................................................................................................. 214
Subscribing to Managed Object Value Updates using SNMP.................................................................................. 215
Enabling a Subset of SNMP Traps............................................................................................................................... 216
Reading Managed Object Values..................................................................................................................................217
Displaying the Ports in a VLAN using SNMP.............................................................................................................. 218
Fetching Dynamic MAC Entries using SNMP.............................................................................................................219
Deriving Interface Indices.............................................................................................................................................. 221
MIB Support to Display Reason for Last System Reboot..........................................................................................221
Viewing the Reason for Last System Reboot Using SNMP...............................................................................222
MIB Support to Display Egress Queue Statistics.......................................................................................................222
Monitoring BGP sessions via SNMP...........................................................................................................................222
Monitor Port-Channels..................................................................................................................................................224
Entity MIBS.................................................................................................................................................................... 225
Example of Sample Entity MIBS outputs..............................................................................................................225
SNMP Traps for Link Status.........................................................................................................................................227
Contents
9