Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 62 / 698

Managing the Switch
ExtremeWare XOS 11.3 Concepts Guide
62
Authenticating Users
ExtremeWare XOS provides three methods to authenticate users who log in to the switch:
●
RADIUS client
●
●
Local database of accounts and passwords
NOTE
You cannot configure RADIUS and at the same time.
RADIUS Client
Remote Authentication Dial In User Service (RADIUS, RFC 2138) is a mechanism for authenticating and
centrally administrating access to network nodes. The ExtremeWare XOS RADIUS client
implementation allows authentication for Telnet or console access to the switch.
For detailed information about RADIUS and configuring a RADIUS client, see Chapter 16 , “ Security .”
Terminal Access Controller Access Control System Plus () is a mechanism for providing
authentication, authorization, and accounting on a central server, similar in function to the RADIUS
client. The ExtremeWare XOS version of is used to authenticate prospective users who are
attempting to administer the switch. is used to communicate between the switch and an
authentication database.
For detailed information about and configuring , see Chapter 16 , “ Security .”
Management Accounts
ExtremeWare XOS supports two levels of management accounts (local database of accounts and
passwords): User and Administrator. A user level account can view but not change all manageable
parameters, with the exception of the user account database and SNMP community strings. An
administrator level account can view and change all manageable parameters.
For detailed information about configuring management accounts, see Chapter 2 , “ Accessing the
Switch .”
Using Telnet
ExtremeWare XOS supports the Telnet Protocol based on RFC 854. Telnet allows interactive remote
access to a device and is based on a client/server model. ExtremeWare XOS uses Telnet to connect to
other devices from the switch (client) and to allow incoming connections for switch management using
the CLI (server).