Cisco Small Business 200, Руководство администратора

Страница: 265 / 351

Security
Defining Management Access Method
Cisco Small Business 200 Series Smart Switch Administration Guide 252
17
If an authentication method fails or the user has insufficient privilege level, the user
is denied access to the device. In other words, if authentication fails at an
authentication method, the device stops the authentication attempt; it does not
continue and does not attempt to use the next authentication method.
To define authentication methods for an access method:
STEP 1
Click Security > Management Access Authentication .
STEP 2
Select an access method from the Application list.
STEP 3
Use the arrows to move the authentication method between the Optional Methods
column and the Selected Methods column. The first method selected is the first
method that is used.
• RADIUS —User is authenticated on a RADIUS server. You must have
configured one or more RADIUS servers.
• None —User is allowed to access the device without authentication.
• Local —Username and password are checked against the data stored on the
local device. These username and password pairs are defined in the User
Accounts page.
NOTE
The Local or None authentication method must always be
selected last. All authentication methods selected after Local or None
are ignored.
STEP 4
Click Apply . The selected authentication methods are associated with the access
method.
Defining Management Access Method
Access profiles determine how to authenticate and authorize users accessing the
device through various access methods. Access Profiles can limit management
access from specific sources.
Only users who pass both the active access profile and the management access
authentication methods are given management access to the device.
There can only be a single access profile active on the device at one time.