Content

| 9.5 |  | Securing Remote Management |
| 9.5.1 |  | Remote management security options |

Out-of-band connections from remote locations need to have a modem connected to the console or auxiliary port of the device being managed. Controlling access to use the modem can be achieved by combining advanced local user name options with call-back technology to ensure specific users can only establish dial-in modem sessions from specific locations. Configuring modem call-back security is covered in the CCNP2 Remote Access course.

In-band management traffic shares bandwidth with user traffic, and can be segregated from user traffic using these features:

- Local user names
- Secure shell (SSH) session encryption
- VLANs
- Access-lists

In-band management connections can also be controlled using advanced local user name options. Advanced local user name options for controlling both out-of-band and in-band connections will be discussed later in this module.