SmartSwitch Router User Reference Manual 275Chapter 18: Security Configuration GuideTo monitor TACACS Plus, enter the following commands in Enable mode:Configuring PasswordsThe SSR provides password authentication for accessing the User and Enable modes. IfTACACS is not enabled on the SSR, only local password authentication is performed.To configure SSR passwords, enter the following commands in Configure mode:Layer-2 Security FiltersLayer-2 security filters on the SSR allow you to configure ports to filter specific MACaddresses. When defining a Layer-2 security filter, you specify to which ports you wantthe filter to apply. You can specify the following security filters:• Address filtersThese filters block traffic based on the frame's source MAC address, destination MACaddress, or both source and destination MAC addresses in flow bridging mode.Address filters are always configured and applied to the input port.• Port-to-address lock filtersThese filters prohibit a user connected to a locked port or set of ports from usinganother port.• Static entry filtersThese filters allow or force traffic to go to a set of destination ports based on a frame'ssource MAC address, destination MAC address, or both source and destination MACaddresses in flow bridging mode. Static entries are always configured and applied atthe input port.• Secure port filtersA secure filter shuts down access to the SSR based on MAC addresses. All packetsreceived by a port are dropped. When combined with static entries, however, thesefilters can be used to drop all received traffic but allow some frames to go through.Show TACACS Plus serverstatistics.tacacs-plus show statsShow all TACACS Plusparameters.tacacs-plus show allSet User mode password. system set password login Set Enable mode password. system set password enable
