AX1240S-AP-0202C_R2X
6
8. Login Security and RADIUS
8.2.3 Authentication via RADIUS
(1) Selection of login authentication service [Change]
The RADIUS server group has been added to the options for login authentication services. [Ver. 2.2.E and later]
Correlation diagram of authentication method configuration
has been added in front of Figure
8-7 Authentication
method sequence
. Subsequent figure numbers have been changed accordingly.
Before the change:
You can specify more than one service that you wish to use for login authentication. You can specify RADIUS
authentication and you can specify password-based authentication local to the Switch. You can specify only one
of the authentication methods, or both of them. If both are specified and authentication fails with the first
specified method, the second method is used.
The following figure shows the authentication method sequence used if RADIUS and local password
authentication are specified in this order.
Figure 8-7 Authentication method sequence
(The rest omitted)
After the change:
You can specify more than one service that you wish to use for login authentication. You can specify RADIUS
authentication (general-purpose RADIUS server authentication or RADIUS server group authentication) and you
can specify password-based authentication local to the Switch.
The following figure shows a correlation diagram of authentication method settings.
Figure 8-7 Correlation diagram of authentication method settings
Login
authentication
Authentication method selection
:
aaa authentication login
Switch default:
default
RADIUS authentication
:group radius
Local authentication:
local
RADIUS server group
:group
group-name
Internal DB
#
Select
#: Internal DB
Control table for the user ID and password
used for local password authentication
General-purpose
RADIUS server
[Max. 20 servers]
RADIUS server group
:group
group-name
You can specify only one of the authentication methods, or both of them. If both are specified and authentication
fails with the first specified method, the second method is used.
You cannot simultaneously specify both
group radius
(general-purpose RADIUS server authentication) and
