Edge-Core ECS4610-24F, Management Manual, Page: 248 / 1154

C
HAPTER
13
| Security Measures
AAA Authorization and Accounting
– 248 –
W
EB
I
NTERFACE
To configure the method(s) of controlling management access:
1.
Click Security, AAA, System Authentication.
2.
Specify the authentication sequence (i.e., one to three methods).
3.
Click Apply.
Figure 118: Configuring the Authentication Sequence
C
ONFIGURING
R
EMOTE
L
OGON
A
UTHENTICATION
S
ERVERS
Use the Security > AAA > Server page to configure the message exchange
parameters for RADIUS or remote access authentication servers.
Remote Authentication Dial-in User Service (RADIUS) and Terminal Access
Controller Access Control System Plus () are logon authentication
protocols that use software running on a central server to control access to
RADIUS-aware or TACACS-aware devices on the network. An
authentication server contains a database of multiple user name/password
pairs with associated privilege levels for each user that requires
management access to the switch.
Figure 119: Authentication Server Operation
RADIUS uses UDP while uses TCP. UDP only offers best effort
delivery, while TCP offers a connection-oriented transport. Also, note that
RADIUS encrypts only the password in the access-request packet from the
client to the server, while encrypts the entire body of the packet.
CLI R
EFERENCES
◆
"RADIUS Client" on page 662
◆
" Client" on page 666
◆
"AAA" on page 669
Web
Telnet
RADIUS/
server
console
1. Client attempts management access.
2. Switch contacts authentication server.
3. Authentication server challenges client.
4. Client responds with proper password or key.
5. Authentication server approves access.
6. Switch grants management access.