Lenovo ThinkSystem NE2552E, Application Manual

Page: 105 / 574

© Copyright Lenovo 2018 Chapter 5: Authentication & Authorization Protocols
105
Authentication Features in Lenovo ENOS
Authentication is the action of determining the identity of a user, and is generally
done when the user first attempts to log in to a device or gain access to its services.
Lenovo ENOS supports ASCII inbound login to the device. PAP, CHAP and ARAP
login methods, change password requests, and one ‐ time password
authentication are not supported.
Authorization
Authorization is the action of determining a user’s privileges on the device, and
usually takes place after authentication.
The default mapping between authorization levels and Lenovo ENOS
management access levels is shown in Table 9 . The authorization levels listed in
this table must be defined on the server.
Alternate mapping between authorization levels and Lenovo ENOS
management access levels is shown in Table 10 . Use the following command to use
the alternate authorization levels:
You can customize the mapping between privilege levels and NE2552E
management access levels. Use the following command to manually map each
privilege level (0 ‐ 15) to a corresponding NE2552E management access
level:
If the remote user is successfully authenticated by the authentication server, the
switch verifies the privileges of the remote user and authorizes the appropriate
access.
Table 9.
Default Authorization Levels
Lenovo ENOS User Access
Level
Level
user
0
oper
3
admin (USERID)
6
NE2552E(config) # tacacs-server privilege-mapping
Table 10.
Alternate Authorization Levels
Lenovo ENOS User Access Level Level
user
0–1
oper
6–8
admin (USERID)
14–15
NE2552E(config)# tacacs-server user-mapping