Using the CLI 167CLI prevents the user from accidentally copying a configuration image onto asoftware image and vice versa.Management Interface SecurityThis section describes the minimum set of management interface securitymeasures implemented by the CLI. Management interface security consistsof user account management, user access control and remote network/hostaccess controls.CLI through Telnet, SSH, Serial InterfacesThe CLI is accessible through a local serial interface, a remote telnet, orsecure shell sessions. Since the serial interface requires a physical connectionfor access, it is used if all else fails. The serial interface is the only interfacefrom which the user may access the Easy Setup Wizard. It is the onlyinterface that the user can access if the remote authentication servers aredown and the user has not configured the system to revert to local managedaccounts.The following rules and specifications apply to these interfaces:• The CLI is accessible from remote telnet through the management IPaddress for the switch.• The CLI is accessible from a secure shell interface.• The CLI generates keys for SSH locally.• The serial session defaults to 9600 baud rate, eight data bits, non-parityand one stop bit.User Accounts ManagementThe CLI provides authentication for users either through remoteauthentication servers supporting TACACS+ or Radius or through a set oflocally managed user accounts. The setup wizard asks the user to create theinitial administrator account and password at the time the system is booted.The following rules and specifications apply:• The user may create as many a five local user accounts.• User accounts have an access level, a user name, and a user password.• The user is able to delete the user accounts but the user will not be able todelete the last level 15 account.
