Dell N1100-ON, Reference Manual

Page: 841 / 2332

Security Commands
841
Command Authorization
Dell EMC Networking switches support per command or enable
authorization using a TACACS server. See the authorization command in
this section for further information. Additionally, the RADIUS or TACACS
server can be configured to assign an administrative profile to a switch
administrator. The administrative profile identifies groups of commands
which may be executed by the administrator. See the Administrative Profiles
Commands section for further information on this capability.
Network Authentication
The network administrator can require that devices attached to the network
be authenticated prior to gaining access to network resources. This is most
often performed by the use of IEEE 802.1x in conjunction with a RADIUS or
TACACS authentication server. Dell EMC Networking switches support use
of RADIUS or TACACS authentication servers as well as a local, switch based,
authentication server. Refer to the RADIUS Commands section for
information on configuring a RADIUS server for authentication of network
devices. See the 802.1x Commands section for information on configuring
device access to network resources.
Dell EMC Networking switches support an internal authentication capability
that allows configuration of authentication preference lists for network
connected devices. The authentication preference lists support
authentication methods such as IEEE 802.1x, internal authentication, and no
authentication. MAC Authentication Bypass may be configured to allow
IEEE 802.1x unaware devices access to the network. Refer to the section
below for information on configuring authentication preference lists for
network device access.
Local 802.1x Authentication Server
The Dell EMC Networking switch supports a dedicated database for local
authentication of users for network access through the 802.1x feature. This
functionality is distinct from management access for the switch. See the
802.1x Commands section for information on configuring IEEE 802.1x access
to the network using an external authentication server.