Table of Contents Preface About This Guide Getting Started In This Chapter Alcatel-Lucent 7750 SR Router Configuration Process 7750 SR OS, System Management Guide, Security In This Chapter Authentication, Authorization, and Accounting Authentication Local Authentication RADIUS Authentication TACACS+ Authentication Authorization Local Authorization RADIUS Authorization TACACS+ Authorization Accounting RADIUS Accounting TACACS+ Accounting Security Controls When a Server Does Not Respond Access Request Flow CPU Protection CPU Protection Extensions ETH-CFM Distributed CPU Protection (DCP) Applicability of Distributed CPU Protection Log Events, Statistics, Status and SNMP support DCP Policer Resource Management Operational Guidelines and Tips DCP Configuration Samples Vendor-Specific Attributes (VSAs) Other Security Features Secure Shell (SSH) Per Peer CPM Queuing CPM Filters and Traffic Management TTL Security for BGP and LDP Exponential Login Backoff User Lockout Encryption 802.1x Network Access Control TCP Enhanced Authentication Option Packet Formats Keychain Configuration Notes General 7750 SR OS, System Management Guide, Configuring Security with CLI Setting Up Security Attributes Configuring Authentication Configuring Authorization Configuring Accounting Security Configurations Configuration Tasks Security Configuration Procedures Configuring Management Access Filters Configuring CPM Filters Policy Configuring IPv6 CPM Filters Configuring CPM Queues Configuring Password Management Parameters IPSec Certificates Parameters Configuring Profiles Configuring Users Configuring Keychains Copying and Overwriting Users and Profiles User Profile RADIUS Configurations Configuring RADIUS Authentication Configuring RADIUS Authorization Configuring RADIUS Accounting Configuring 802.1x RADIUS Policies Configuring CPU Protection Policies TACACS+ Configurations Enabling TACACS+ Authentication Configuring TACACS+ Authorization Configuring TACACS+ Accounting Enabling SSH Configuring Login Controls 7750 SR OS, System Management Guide, Security Command Reference Command Hierarchies Configuration Commands LLDP Commands 7750 SR OS, System Management Guide, SNMP In This Chapter SNMP Overview SNMP Architecture Management Information Base SNMP Protocol Operations SNMP Versions Management Information Access Control User-Based Security Model Community Strings Views Access Groups Users Which SNMP Version to Use? Configuration Notes General 7750 SR OS, System Management Guide, Configuring SNMP with CLI SNMP Configuration Overview Configuring SNMPv1 and SNMPv2c Configuring SNMPv3 Basic SNMP Security Configuration Configuring SNMP Components Configuring a Community String Configuring View Options Configuring Access Options Configuring USM Community Options Configuring Other SNMP Parameters 7750 SR OS, System Management Guide, SNMP Command Reference Command Hierarchies Configuration Commands 7750 SR OS, System Management Guide, SNMP, Event and Accounting Logs In This Chapter Logging Overview Log Destinations Console Session Memory Logs Log Files SNMP Trap Group Syslog Event Logs Event Sources Event Control Log Manager and Event Logs Event Filter Policies Event Log Entries Simple Logger Event Throttling Default System Log Accounting Logs Accounting Records Accounting Files Design Considerations Reporting and Time-Based Accounting Overhead Reduction in Accounting: Custom Record User Configurable Records Changed Statistics Only Configurable Accounting Records Significant Change Only Reporting Immediate Completion of Records AA Accounting per Forwarding Class Configuration Notes 7750 SR OS, System Management Guide, Configuring Logging with CLI Log Configuration Overview Log Types Basic Event Log Configuration Common Configuration Tasks Configuring an Event Log Configuring a File ID Configuring an Accounting Policy Configuring Event Control Configuring Throttle Rate Configuring a Log Filter Configuring an SNMP Trap Group Setting the Replay Parameter Shutdown In-Band Port No Shutdown Port Configuring a Syslog Target Configuring an Accounting Custom Record Log Management Tasks Modifying a Log File Deleting a Log File Modifying a File ID Deleting a File ID Modifying a Syslog ID Deleting a Syslog Modifying an SNMP Trap Group Deleting an SNMP Trap Group Modifying a Log Filter Deleting a Log Filter Modifying Event Control Parameters Returning to the Default Event Control Configuration 7750 SR OS, System Management Guide, Log Command Reference Command Hierarchies Facility Alarms In This Chapter Facility Alarms Overview Facility Alarms vs. Log Events Facility Alarm Severities and Alarm LED Behavior Facility Alarm Hierarchy Facility Alarm List Configuring Logging with CLI Basic Facility Alarm Configuration Common Configuration Tasks Configuring the Maximum Number of Alarms To Clear Facility Alarms Command Reference Command Hierarchies
