Security

For general information about system security support, see the following topics in the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide, "Security":

Authentication, authorization, and accounting
- Authentication
  - Local authentication
  - RADIUS authentication
  - TACACS+ authentication
- Authorization
  - Local authorization
  - RADIUS authorization
  - TACACS+ authorization
- Security controls
RADIUS VSAs
TACACS+ services and VSAs
Control and management traffic protection
- TTL security
- Management Access Filter
Other security features
- SSH
  - SSH PKI authentication
  - MAC client and server list
  - KEX client and server list
  - Regenerate the SSH key without disabling SSH
- Exponential login backoff
- User lockout
- CLI login scripts
- File access controls
- 802.1x network access control
- TCP enhanced authentication option
Configuring security with CLI

Note: On the 7705 SAR-Hm and 7705 SAR-Hmc, 802.1x network access control is supported only WLAN interface access points.

For descriptions of security commands, see the 7450 ESS, 7750 SR, 7950 XRS, and VSR Classic CLI Command Reference Guide and the 7450 ESS, 7750 SR, 7950 XRS, and VSR Clear, Monitor, Show, and Tools CLI Command Reference Guide.