Extreme Networks EPICenter 6.0, Справочное руководство

Страница: 351 / 580

Administration Functions
EPICenter Reference Guide
351
These permissions enable access to Extreme Networks switches through Telnet or ExtremeWare Vista
(accessed through the Device Manager command from the Devices menu of a right-click menu or the
Tools menu). The use of the RADIUS server avoids the need to maintain user names, passwords, and
access permissions in each switch, and instead centralizes the configuration in one location in the
EPICenter server.
EPICenter and RADIUS Authentication
By default EPICenter provides its own authentication and authorization for EPICenter users. However,
EPICenter can be configured to act as a client to an external RADIUS server, or as a RADIUS server.
RADIUS provides a standard way for the EPICenter software and Extreme Networks switches to handle
user authentication, permitting the unification of the Extreme Networks CLI, ExtremeWare Vista, and
EPICenter user authentication. When EPICenter acts as a RADIUS client, the external RADIUS server
can be configured using a Vendor Specific Attribute (VSA) to provide user role information to
EPICenter along with the login and password authentication.
The EPICenter software incorporates a basic RADIUS server that may be useful for demonstration or
testing purposes. However, the built-in RADIUS server should not be used in a production
environment. It is not sufficiently robust for use as an authentication service in a production
environment.
Setting EPICenter Server Properties
The Server Properties interface of the Administration applet allows an EPICenter administrator to
modify a number of parameters that affect server performance and function. These include
communication parameters such as polling intervals, time-outs, port usage, number of retries, and a
number of other parameters.
Administrator User can modify device parameters as well as view status information and statistics.
No Access User does not have switch access (cannot login, cannot obtain device status
information, cannot change device settings or configuration.