
C
HAPTER
14
| Security Measures
AAA Authorization and Accounting
– 273 –
3.
Define a method name for each service to which you want to apply
accounting or authorization and specify the RADIUS or server
groups to use.
4.
Apply the method names to port or line interfaces.
N
OTE
:
This guide assumes that RADIUS and servers have already
been configured to support AAA. The configuration of RADIUS and
server software is beyond the scope of this guide, refer to the
documentation provided with the RADIUS or server software.
C
ONFIGURING
L
OCAL
/
R
EMOTE
L
OGON
A
UTHENTICATION
Use the Security > AAA > System Authentication page to specify local or
remote authentication. Local authentication restricts management access
based on user names and passwords manually configured on the switch.
Remote authentication uses a remote access authentication server based
on RADIUS or protocols to verify management access.
CLI R
EFERENCES
"Authentication Sequence" on page 664
C
OMMAND
U
SAGE
By default, management access is always checked against the
authentication database stored on the local switch. If a remote
authentication server is used, you must specify the authentication
sequence. Then specify the corresponding parameters for the remote
authentication protocol using the Security > AAA > Server page. Local
and remote logon authentication control management access via the
console port, web browser, or Telnet.
You can specify up to three authentication methods for any user to
indicate the authentication sequence. For example, if you select
(1) RADIUS, (2) TACACS and (3) Local, the user name and password
on the RADIUS server is verified first. If the RADIUS server is not
available, then authentication is attempted using the server,
and finally the local user name and password is checked.
P
ARAMETERS
These parameters are displayed:
Authentication Sequence
– Select the authentication, or
authentication sequence required:
Local
– User authentication is performed only locally by the switch.
RADIUS
– User authentication is performed using a RADIUS server
only.
TACACS
– User authentication is performed using a
server only.
Содержание DG-FS4526E
Страница 4: ...ABOUT THIS GUIDE 4...
Страница 34: ...CONTENTS 34...
Страница 50: ...TABLES 50...
Страница 52: ...SECTION I Getting Started 52...
Страница 62: ...CHAPTER 1 Introduction System Defaults 62...
Страница 80: ...CHAPTER 2 Initial Switch Configuration Managing System Files 80...
Страница 82: ...SECTION II Web Configuration 82...
Страница 100: ...CHAPTER 3 Using the Web Interface Navigating the Web Browser Interface 100...
Страница 128: ...CHAPTER 4 Basic Management Tasks Resetting the System 128...
Страница 166: ...CHAPTER 5 Interface Configuration VLAN Trunking 166...
Страница 198: ...CHAPTER 6 VLAN Configuration Configuring VLAN Mirroring 198...
Страница 516: ...CHAPTER 17 IP Services Displaying the DNS Cache 516...
Страница 562: ...CHAPTER 19 Using the Command Line Interface CLI Command Groups 562...
Страница 652: ...CHAPTER 22 SNMP Commands 652...
Страница 660: ...CHAPTER 23 Remote Monitoring Commands 660...
Страница 714: ...CHAPTER 24 Authentication Commands Management IP Filter 714...
Страница 802: ...CHAPTER 27 Interface Commands 802...
Страница 824: ...CHAPTER 29 Port Mirroring Commands RSPAN Mirroring Commands 824...
Страница 846: ...CHAPTER 32 Address Table Commands 846...
Страница 874: ...CHAPTER 33 Spanning Tree Commands 874...
Страница 886: ...CHAPTER 34 ERPS Commands 886...
Страница 928: ...CHAPTER 35 VLAN Commands Configuring Voice VLANs 928...
Страница 942: ...CHAPTER 36 Class of Service Commands Priority Commands Layer 3 and 4 942...
Страница 998: ...CHAPTER 38 Multicast Filtering Commands Multicast VLAN Registration 998...
Страница 1022: ...CHAPTER 39 LLDP Commands 1022...
Страница 1064: ...CHAPTER 40 CFM Commands 1064...
Страница 1084: ...CHAPTER 42 Domain Name Service Commands 1084...
Страница 1090: ...CHAPTER 43 DHCP Commands DHCP Client 1090...
Страница 1122: ...CHAPTER 44 IP Interface Commands IPv6 Interface 1122...
Страница 1124: ...SECTION IV Appendices 1124...
Страница 1129: ...APPENDIX A Software Specifications Management Information Bases 1129 Trap RFC 1215 UDP MIB RFC 2013...
Страница 1130: ...APPENDIX A Software Specifications Management Information Bases 1130...
Страница 1152: ...COMMAND LIST 1152...
Страница 1161: ......
Страница 1162: ...DG FS4526E 042012 HW R01...