Nortel Networks 8600 Switch User Manual


 
26 Commissioning fundamentals
Table 5
Secure and nonsecure protocols for IPv4
Nonsecure protocols
Default
status
Equivalent secure protocols
Default
status
FTP and TFTP Disabled SCP Disabled
Telnet Disabled
Secure SHell (SSH) v1, v2
Nortel recommends that you use
SSHv2 instead of SSHv1.
Disabled
SNMPv1, SNMPv2 Enabled
SNMPv3
You must load the DES/AES image on
the switch to use SNMPv3.
Enabled
Rlogin Disabled Secure SHell (SSH) v1, v2 Disabled
HTTP Disabled
No equivalent
ATTENTION
Nortel recommends that you do not
use this protocol due to the risk to
the security of your network.
Password encryption
Beginning in Release 4.1, the switch stores passwords in encrypted format
and no longer in the configuration file.
ATTENTION
If you load a configuration file saved prior to Release 3.7.6, saved passwords
from the configuration file are not recognized. If you boot the switch for the first
time with the software Release 3.7.6 or higher image, the switch resets the
password to default values and generates a log, which indicates the changes.
For security reasons, Nortel recommends that you configure the passwords to
values other than the factory defaults.
Management port
You must assign an IP address to the management port before you can
use it for out-of-band (OOB) management. In a switch with redundant
8691or 8692 modules, each management port uses a specific IP address.
In addition, you can create a virtual management port with an IP address
available to the master management module.
The master management module replies to all management requests
sent to the virtual IP address, and to requests sent to the management
port IP address. If the master management module fails and the backup
management module takes over, the virtual management port IP address
continues to provide management access to the switch.
Nortel Ethernet Routing Switch 8600
Commissioning
NN46205-319 01.01 Standard
30 May 2008
Copyright © 2008 Nortel Networks
.