IBM RackSwitch G8000, Application Manual

Page: 67 / 362

© Copyright IBM Corp. 2011 Chapter 5. Authentication & Authorization Protocols
65
• Supports user-configurable RADIUS application port. The default is
1812/UDP-based on RFC 2138. Port 1645 is also supported.
• Supports user-configurable RADIUS application port. The default is UDP port
1645. UDP port 1812, based on RFC 2138, is also supported.
• Allows network administrator to define privileges for one or more specific users to
access the switch at the RADIUS user database.
Switch User Accounts
The user accounts listed in Table 3 can be defined in the RADIUS server dictionary
file.
RADIUS Attributes for IBM N/OS User Privileges
When the user logs in, the switch authenticates his/her level of access by sending
the RADIUS access request, that is, the client authentication request, to the
RADIUS authentication server.
If the remote user is successfully authenticated by the authentication server, the
switch will verify the privileges of the remote user and authorize the appropriate
access. The administrator has an option to allow secure backdoor access via
Telnet/SSH/BBI. Secure backdoor provides switch access when the RADIUS
servers cannot be reached. You always can access the switch via the console port,
by using
noradius
and the administrator password, whether secure backdoor is
enabled or not.
Note: To obtain the RADIUS backdoor password for your G8000, contact Technical
Support.
Table 3. User Access Levels
User Account Description and Tasks Performed Password
User The User has no direct responsibility for switch
management. They can view all switch status
information and statistics but cannot make any
configuration changes to the switch.
user
Operator The Operator manages all functions of the switch.
The Operator can reset ports.
oper
Administrator The super-user Administrator has complete access to
all commands, information, and configuration
commands on the switch, including the ability to
change both the user and administrator passwords.
admin