Supermicro SSE-G2252, User Manual

Page: 742 / 1401

Chapter 23: Authentication Commands
User Accounts and Privilege Levels
– 753 –
23 A
UTHENTICATION
C
OMMANDS
You can configure this switch to authenticate users logging into the system
for management access using local or remote authentication methods.
Port-based authentication using IEEE 802.1X can also be configured to
control either management access to the uplink ports or client access
1 to
the data ports.
U
SER
A
CCOUNTS AND
P
RIVILEGE
L
EVELS
The basic commands required for management access and assigning
command privilege levels are listed in this section. This switch also includes
other options for password checking via the console or a Telnet connection
( page 678 ), user authentication via a remote authentication server
( page 753 ), and host access authentication for specific ports ( page 792 ).
1. For other methods of controlling client access, see
“General Security Measures”
on page 817
.
Table 23-1: Authentication Commands
Command Group Function
User Accounts and
Privilege Levels
Configures the basic user names and passwords for management
access, and assigns a privilege level to specified command groups
or individual commands
Authentication Sequence Defines logon authentication method and precedence
RADIUS Client Configures settings for authentication via a RADIUS server
Client Configures settings for authentication via a server
AAA Configures authentication, authorization, and accounting for
network access
Web Server Enables management access via a web browser
Telnet Server Enables management access via Telnet
Secure Shell Provides secure replacement for Telnet
802.1X Port
Authentication
Configures host authentication on specific ports using 802.1X
Management IP Filter Configures IP addresses that are allowed management access
PPPoE Intermediate
Agent
Configures relay parameters required for sending authentication
messages between a client and broadband remote access servers
Table 23-2: User Access Commands
Command Function Mode
enable password Sets a password to control access to the Privileged
Exec level
GC
username Establishes a user name-based authentication system
at login
GC