CTC Union GSW-3208M2, Руководство пользователя

Страница: 35 / 145

35
Chapter 4
Web Configuration & Operation
Group Name: This name identifies the privilege group. In most cases, a privilege level group consists of a single module
(e.g. LACP, RSTP or QoS), but a few of them contains more than one. The following description defines these privilege
level groups in details:
System: Contact, Name, Location, Timezone, Daylight Saving Time, Log.
Security:
Authentication, System Access Management, Port (contains Dot1x port, MAC based and the MAC Address
Limit), ACL, HTTPS, SSH, ARP Inspection, IP source guard.
IP: Everything except 'ping'.
Port: Everything except 'VeriPHY'.
Diagnostics: 'ping' and 'VeriPHY'.
Maintenance: CLI- System Reboot, System Restore Default, System Password, Configuration Save, Configuration Load
and Firmware Load. Web- Users, Privilege Levels and everything in Maintenance.
Debug: Only present in CLI.
Privilege Levels: Every group has an authorization Privilege level for the following sub groups:
configuration read-only
configuration/execute read-write
status/statistics read-only
status/statistics read-write (e.g. for clearing of statistics)
User Privilege should be the same or greater than the authorization Privilege level to have access to that group.
4.6.1.3 Auth Method
This page allows you to configure how a user is authenticated when he logs into the switch via one of the management
client interfaces.
Client: The management client for which the configuration below applies.
Methods:
Method can be set to one of the following values:
no: Authentication is disabled and login is not possible.
local: Use the local user database on the switch for authentication.
radius: Use remote RADIUS server(s) for authentication.
: Use remote server(s) for authentication.