Extreme Networks ExtremeWare XOS 11.1, Manual

Page: 45 / 496

Authenticating Users
ExtremeWare XOS 11.1 Concepts Guide
45
The switch uses the Ethernet management port only for host operation, not for switching or routing.
The TCP/IP configuration for the management port is done using the same syntax as used for virtual
LAN (VLAN) configuration. The VLAN
mgmt comes preconfigured with only the management port as a
member.
When you configure the IP address for the VLAN mgmt , this address gets assigned to the primary
MSM. You can connect to the management port on the primary MSM for any switch configuration. The
management port on the backup MSM is available only when failover occurs. At that time, the primary
MSM relinquishes its role, the backup MSM takes over, and the VLAN
mgmt on the new primary MSM
acquires the IP address of the previous primary MSM.
You configure the IP address, subnet mask, and default router for the VLAN mgmt , using the following
commands:
configure vlan mgmt ipaddress <ip_address>/<subnet_mask>
configure iproute add default <gateway> {vr <vrname>} {<metric>} {multicast-only |
unicast-only}
Authenticating Users
ExtremeWare XOS provides three methods to authenticate users who log in to the switch:
●
RADIUS client
●
●
Local database of accounts and passwords
NOTE
You cannot configure RADIUS and at the same time.
RADIUS Client
Remote Authentication Dial In User Service (RADIUS, RFC 2138) is a mechanism for authenticating and
centrally administrating access to network nodes. The ExtremeWare XOS RADIUS client
implementation allows authentication for Telnet or console access to the switch.
Terminal Access Controller Access Control System Plus () is a mechanism for providing
authentication, authorization, and accounting on a central server, similar in function to the RADIUS
client. The ExtremeWare XOS version of is used to authenticate prospective users who are
attempting to administer the switch. is used to communicate between the switch and an
authentication database.
Configuring RADIUS Client and
For detailed information about configuring a RADIUS client or , see Chapter 13 , “ Security .”